Cybersecurity Engineer – Email Security

TPI Global Solutions; Downey (CA); On-site; USD 120,000 - 190,000; Full time

Job summary

TPI Global Solutions in Downey, CA seeks a Security Engineer to lead secure design across complex technology implementations and bridge legacy teams with product groups to build a culture centered on secure, private systems. You will apply white-hat techniques and research to identify vulnerabilities.

Responsibilities include audits, risk analysis, vulnerability testing, and security code reviews; you will craft technical solutions to mitigate vulnerabilities and keep pace with evolving threat

Qualifications

• Ten years of experience developing and implementing technical security solutions.
• Three+ years in the last four years with cybersecurity tools and technologies (IDS/IPS, 2FA/MFA, SIEM, DLP, log correlation, SOCaaS, incident response).
• Three+ years in the last four years with security solutions including Proofpoint and advanced phishing protections.
• Three+ years in the last four years integrating cloud email with on-premises security gateways.

Responsibilities

• Perform security audits, risk analysis, and vulnerability testing.
• Conduct security code reviews and develop mitigations.
• Research new attack vectors and implement protective measures.
• Bridge legacy development/ops teams with product-focused security culture.

Skills

Security engineering

Threat modeling

Tools

IDS/IPS

2FA/MFA

SIEM

DLP

SOCaaS

Incident response

Proofpoint Email Protection Gateway

Abnormal

Cisco CMD

Darktrace

Microsoft 365

Azure AD

Exchange Online

Windows Defender

PRTG monitoring

Job description

A Security Engineer serves as the security engineer of complex technology implementations in a product-centric environment; is comfortable with bridging the gap between legacy development or operations teams and working toward a shared culture and vision; works to ensure developers create the most secure systems while enhancing the privacy of all system users; and has experience with white-hat hacking and fundamental computer science concepts. The Security Engineer will perform security audits, risk analysis, application-level vulnerability testing, and security code reviews; develop and implement technical solutions to help mitigate security vulnerabilities; and conduct research to identify new attack vectors.

Experience Required

This classification must have a minimum of ten (10) years of experience with developing and implementing technical solutions to help mitigate security vulnerabilities.

• Minimum of three (3) years of work experience within the last 4 years with cybersecurity tools and technologies, including IDS/IPS, two-factor and multifactor authentication (2FA/MFA), SIEM, DLP, log correlation, SOC-as-a-Service (SOCaaS), incident response, retroactive malware analysis, raw logs, cleanup and restoration, risk and vulnerability management, and Secureworks Taegis XDR/MDR.
• Minimum of three (3) years of work experience within the last 4 years with security solutions, including Proofpoint Email Protection Gateway; advanced phishing protection such as Abnormal, Cisco CMD, and Darktrace; Microsoft 365, Azure AD, Exchange Online, and Windows Defender; and PRTG monitoring.
• Minimum of three (3) years of work experience within the last 4 years integrating cloud-based email services with on-premises secure email gateway (SEG) solutions to maintain consistent security across platforms.
• Minimum of three (3) years of work experience within the last 4 years monitoring and optimizing email security systems to handle large volumes of email traffic efficiently.
• Minimum of three (3) years of work experience within the last 4 years planning and executing email security system migrations between platforms with minimal downtime.
• Minimum of three (3) years of work experience within the last 4 years with Proofpoint Email Protection Gateway, including managing email blacklisting, sender reputation, and all other features of Proofpoint.
• Minimum of three (3) years of work experience within the last 4 years interpreting DMARC policies and reports, troubleshooting SPF and DKIM authentication and alignment issues.