Email Security Engineer — Threat & Incident Response

Zelis Healthcare, LLC; Morris Township (NJ); Hybrid; USD 135,000 - 186,000; Full time

Job summary

Zelis Healthcare, LLC is seeking a Security Engineer focused on Email Security to harden our enterprise email environment. You will prevent phishing, BEC, and other threats, while administering security controls in Exchange Online and Defender for O365, and supporting mail-flow operations.

The role requires hands-on Exchange Online experience, strong security incident response skills, and collaboration with SOC, Identity, and Infrastructure teams.

Qualifications

• 5+ years designing and implementing enterprise-grade email security guardrails in regulated fintech or healthcare environments.
• 3+ years hands-on experience with Microsoft Exchange, Exchange Online, or Microsoft 365 messaging environments.
• Strong knowledge of email protocols and technologies including SMTP, DNS, SPF, DKIM, DMARC.
• Experience investigating phishing, spam, malware, spoofing, and BEC incidents.
• Familiarity with Defender for Office 365, EOP, or similar platforms.

Responsibilities

• Analyze suspicious messages, including headers, routing, URLs, attachments, sender reputation, and indicators of compromise.
• Administer and support email security controls within Exchange Online, Defender for O365, EasyDMARC, and Abnormal Security.
• Troubleshoot mail delivery, mail-flow, quarantine, filtering, and security-policy issues.
• Review Exchange message traces and mail-flow logs to determine disposition and issues.
• Configure mail-flow rules, anti-spam/anti-phishing policies, allow/block lists, and quarantine policies.
• Assist with incident containment/remediation, including blocking, URL/malware controls, and account remediation.

Skills

Email security

Phishing prevention

BEC prevention

Email header analysis

Incident response

Tools

Exchange Online

Defender for Office 365

EOP

Abnormal Security

PowerShell

Job description

Zelis Healthcare, LLC is seeking a Security Engineer focused on Email Security to harden our enterprise email environment. You will prevent phishing, BEC, and other threats, while administering security controls in Exchange Online and Defender for O365, and supporting mail-flow operations.

The role requires hands-on Exchange Online experience, strong security incident response skills, and collaboration with SOC, Identity, and Infrastructure teams.