Email Security Operation

EPITEC; Los Angeles (CA); Remote; USD 80,000 - 107,000; Full time

Job summary

EPITEC is seeking a Security Engineer with deep expertise in enterprise email security, threat detection, and incident response. You will support complex environments, perform assessments, and implement solutions to reduce vulnerabilities.

Responsibilities include managing Proofpoint Core Email Protection, SEG deployments, Exchange Online, Microsoft 365, and SIEM analyses, while coordinating with vendors and documenting procedures.

Qualifications

• Experience mitigating security vulnerabilities in enterprise environments.
• Experience with email-security solutions and mail-flow troubleshooting.
• Strong understanding of DMARC, SPF, and DKIM.

Responsibilities

• Engineer and support enterprise email security solutions.
• Manage Proofpoint SEG and API deployments.
• Investigate phishing and BEC threats and perform incident response.
• Coordinate with vendors on configuration and email delivery issues.
• Document procedures and security controls.

Skills

Email security

Threat detection

Incident response

Vulnerability management

Security assessments

DMARC/SPF/DKIM

Phishing analysis

Education

Bachelor's degree in Computer Science or related IT/Engineering field

Tools

Proofpoint Core Email Protection

Secure Email Gateway (SEG)

Abnormal Security

Microsoft 365 / Exchange Online

Azure AD

Microsoft Defender

SIEM

Job description

Security Engineer – Email Security & Cybersecurity

Location: Los Angeles, California

Work Arrangement: Remote

Contract Duration: 1-year with possible extension, W2

Schedule: Monday-Friday, 8:00 AM-5:00 PM Pacific Time

Pay: $68.00/hr

Position Overview

We are seeking an experienced Security Engineer with deep expertise in enterprise email security, cybersecurity technologies, threat detection, incident response, and vulnerability management.

This role will support complex technology environments and help strengthen the security and privacy of enterprise systems. The Security Engineer will perform security assessments, analyze risks and vulnerabilities, investigate security threats, troubleshoot complex email-security and mail-flow issues, and implement technical solutions designed to reduce security vulnerabilities.

Key Responsibilities

• Engineer, administer, configure, and support enterprise email security solutions.
• Manage Proofpoint Core Email Protection, including Secure Email Gateway (SEG) and API-based deployments.
• Support Abnormal Security and other advanced phishing and email-threat protection technologies.
• Support Microsoft Exchange Server, Exchange Online, Microsoft 365, Azure AD, and Microsoft Defender/Windows Defender within an email-security environment.
• Monitor and optimize email-security platforms supporting high email volumes.
• Integrate cloud-based email services with on-premises Secure Email Gateway solutions.
• Plan and execute email-security platform migrations while minimizing downtime.
• Manage Proofpoint functionality including email blacklisting, sender reputation, and related security controls.
• Investigate and mitigate phishing, business email compromise, malware, spam, impersonation, and account-compromise threats.
• Interpret DMARC policies and reports and troubleshoot SPF and DKIM authentication and alignment issues.
• Troubleshoot SMTP, DNS, email authentication, mail-flow, configuration, and email-delivery issues.
• Use SIEM platforms to analyze historical email data and logs for threat investigations and incident response.
• Perform security audits, risk analysis, vulnerability testing, and security code reviews.
• Identify vulnerabilities and develop technical solutions to mitigate security risks.
• Coordinate with technology vendors to resolve configuration and email-delivery issues.
• Create and maintain technical documentation, procedures, and end-user instructions.

Required Experience

• 10+ years of experience developing and implementing technical solutions to mitigate security vulnerabilities.
• 3+ years of experience within the last 4 years working with cybersecurity tools and technologies, including:
  • IDS/IPS
  • 2FA/MFA
  • SIEM
  • DLP
  • Log correlation
  • SOC-as-a-Service (SOCaaS)
  • Incident response
  • Malware analysis
  • Raw-log analysis
  • Cleanup and restoration
  • Risk and vulnerability management
  • Secureworks Taegis XDR/MDR
• 3+ years of recent experience with security solutions such as Proofpoint Email Protection Gateway, Abnormal Security, Cisco CMD, Darktrace, Microsoft 365, Azure AD, Exchange Online, Windows Defender, and PRTG.
• 3+ years of recent Proofpoint Email Protection Gateway experience, including email blacklisting, sender reputation, and other Proofpoint functionality.
• 3+ years of recent experience integrating cloud-based email services with on-premises SEG solutions.
• 3+ years of recent experience monitoring and optimizing email-security systems in high-volume environments.
• 3+ years of recent experience planning and executing email-security platform migrations.
• 3+ years of recent experience interpreting DMARC policies/reports and troubleshooting SPF and DKIM authentication and alignment issues.

Technical Skills

• Proofpoint Core Email Protection
• Secure Email Gateway (SEG)
• Abnormal Security
• Microsoft Exchange Server & Exchange Online
• Microsoft 365
• Azure AD
• Microsoft Defender / Windows Defender
• Secureworks Taegis XDR/MDR
• SIEM and log analysis
• IDS/IPS and DLP
• MFA/2FA
• Incident response
• Risk and vulnerability management
• SMTP and enterprise mail flow
• SPF, DKIM, and DMARC
• DNS records including MX, A, CNAME, TXT, and PTR
• Phishing and business email compromise investigation
• Malware, spam, impersonation, and account-compromise detection
• Email-security migrations and integrations
• Security audits and vulnerability analysis
• HIPAA-related email security and compliance

Education

• Bachelor's degree in Computer Science or a related IT/Engineering field.
• The requirements also indicate that additional qualifying experience may substitute for the broader IT/Engineering education requirement on a year-for-year basis.

Additional Requirements

• Must be available Monday through Friday, 8:00 AM-5:00 PM Pacific Time.
• Must participate in assigned on-call schedules supporting after-hours escalations and production incidents.
• Must have a reliable laptop with a functioning camera and microphone for required virtual meetings.
• Strong technical documentation and communication skills.
• Ability to troubleshoot complex email-security, authentication, and mail-flow issues.
• Ability to work with technology vendors and follow established change-control procedures.