Email Security Operation

Pyramid Technology Solutions Inc.; Downey (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Pyramid Technology Solutions Inc. is seeking a Security Engineer to lead security assessments, risk analysis, and vulnerability testing across complex technology implementations in a product-centric environment.

You will review security code, implement mitigations, and conduct threat research while coordinating with teams to improve secure software delivery and privacy protections for users.

Qualifications

• Ten years of experience developing and implementing technical solutions to mitigate security vulnerabilities.
• At least three years in the last four years with cybersecurity tools and technologies (IDS/IPS, 2FA/MFA, SIEM, DLP, log correlation, SOCaaS, incident response, malware analysis, raw logs, cleanup/restoration, risk and vulnerability management, Secureworks Taegis XDR/MDR).
• At least three years in the last four years with security solutions including Proofpoint EPG and Abnormal; plus Microsoft 365, Azure AD, Exchange Online, Windows Defender; and PRTG monitoring.
• At least three years in the last four years integrating cloud-based email services with on-prem SEG solutions to maintain security across platforms.
• At least three years in the last four years monitoring and optimizing email security systems for large email volumes.
• At least three years in the last four years planning and executing email security migrations with minimal downtime.
• At least three years with Proofpoint Email Protection Gateway, managing email blacklisting and sender reputation.
• At least three years interpreting DMARC policies and reports and troubleshooting SPF/DKIM issues.

Responsibilities

• Perform security audits, risk analysis, and application-level vulnerability testing.
• Conduct security code reviews and develop technical solutions to mitigate vulnerabilities.
• Bridge gaps between legacy development/operations teams to foster secure, privacy-focused systems.
• Research new attack vectors and stay ahead of evolving threats.

Skills

Email security

Threat investigations

Incident response

Education

Bachelor’s degree in IT or Engineering

Bachelor of Science in Computer Science

Tools

Proofpoint Core Email Protection

Abnormal Security

Microsoft Exchange / Exchange Online

Windows Defender

DMARC tooling

SIEM platforms

PRTG monitoring

Job description

A Security Engineer serves as the security engineer of complex technology implementations in a product-centric environment; is comfortable with bridging the gap between legacy development or operations teams and working toward a shared culture and vision; works to ensure developers create the most secure systems while enhancing the privacy of all system users; and has experience with white-hat hacking and fundamental computer science concepts. The Security Engineer will perform security audits, risk analysis, application-level vulnerability testing, and security code reviews; develop and implement technical solutions to help mitigate security vulnerabilities; and conduct research to identify new attack vectors.

Skills Required:

Security Engineers will possess knowledge and experience in safeguarding sensitive data from cyber-attacks.

Additional Skills Required:

Possess in-depth knowledge of administering and configuring Proofpoint Core Email Protection, including secure email gateway (SEG) and API-based deployments, and Abnormal Security. Possess in-depth knowledge of supporting Microsoft Exchange Server (on-premises), Exchange Online, and Windows Defender/Microsoft Defender in an email security environment. Possess in-depth knowledge of interpreting DMARC policies and reports, troubleshooting SPF and DKIM authentication and alignment issues, and coordinating with third-party vendors to resolve configuration and email-delivery problems. Strong understanding of SMTP and email authentication, including SPF, DKIM, and DMARC. Possess in-depth knowledge of email-related DNS records, including MX, A, CNAME, TXT, and PTR records. Possess in-depth knowledge of SIEM platforms to query and analyze historical email data and logs for threat investigations and incident response. Ability to identify, investigate, and mitigate email threats, including phishing, business email compromise, malware, spam, impersonation, and account compromise. Knowledge of email-related compliance requirements, such as HIPAA. Ability to identify configuration issues and security anomalies, work with technology vendors to resolve problems, and follow change control procedures. Ability to apply advanced troubleshooting skills for complex email security and mail-flow issues. Ability to create and maintain technical documentation, procedures, and instructions for both technical staff and end users. Ability to develop and implement technical solutions that reduce security vulnerabilities.

Experience Required:

This classification must have a minimum of ten (10) years of experience with developing and implementing technical solutions to help mitigate security vulnerabilities.

Additional Experience Required:

• Minimum of three (3) years of work experience within the last 4 years with cybersecurity tools and technologies, including IDS/IPS, two-factor and multifactor authentication (2FA/MFA), SIEM, DLP, log correlation, SOC-as-a-Service (SOCaaS), incident response, retroactive malware analysis, raw logs, cleanup and restoration, risk and vulnerability management, and Secureworks Taegis XDR/MDR.
• Minimum of three (3) years of work experience within the last 4 years with security solutions, including Proofpoint Email Protection Gateway; advanced phishing protection such as Abnormal, Cisco CMD, and Darktrace; Microsoft 365, Azure AD, Exchange Online, and Windows Defender; and PRTG monitoring.
• Minimum of three (3) years of work experience within the last 4 years integrating cloud-based email services with on-premises secure email gateway (SEG) solutions to maintain consistent security across platforms.
• Minimum of three (3) years of work experience within the last 4 years monitoring and optimizing email security systems to handle large volumes of email traffic efficiently.
• Minimum of three (3) years of work experience within the last 4 years planning and executing email security system migrations between platforms with minimal downtime.
• Minimum of three (3) years of work experience within the last 4 years with Proofpoint Email Protection Gateway, including managing email blacklisting, sender reputation, and all other features of Proofpoint.
• Minimum of three (3) years of work experience within the last 4 years interpreting DMARC policies and reports, troubleshooting SPF and DKIM authentication and alignment issues.

Education Required:

This classification requires the possession of a bachelor’s degree in an IT-related or Engineering field. Additional qualifying experience may be substituted for the required education on a year-for-year basis.

Additional Education Required:

Minimum Bachelor of Science degree in Computer Science or a related field.