Proofpoint Email Security Analyst

Yoh,-A-Day-; McKinney (TX); Hybrid; USD 63,000 - 90,000; Full time

Benefits offered by this job

Medical, Prescription, Dental & Vision

Health Savings Account (HSA)

Life & Disability Insurance

401K Retirement Savings Plan

Direct Deposit & weekly epayroll

Referral Bonus Programs

Certification and training

Equal Opportunity Employer

Job summary

Proofpoint Email Security Analyst role at Yoh, a Day & Zimmermann company, in McKinney, TX. This contract-to-hire position is hybrid and focuses on monitoring dashboards, triage of threats, and incident escalation. Hybrid work arrangement in McKinney, Texas.

You will tune policies, review quarantines, coordinate with SOC and MS 365 teams, and document investigations. The ideal candidate has hands-on Proofpoint experience and strong email threat analysis skills, with clear communication.

Qualifications

• Experience using Proofpoint in an operational security role (monitoring, quarantine triage, investigations, policy tuning).
• Strong knowledge of phishing/BEC tradecraft and email analysis (headers, routing, URLs/attachments).
• Working understanding of Microsoft 365 / Exchange Online concepts and email authentication (SPF/DKIM/DMARC).
• Able to document work clearly and communicate with technical and non-technical users.

Responsibilities

• Monitor Proofpoint dashboards, alerts, quarantine queues, digest activity, abuse mailboxes, and user-reported phishing submissions.
• Triage and investigate email threats including phishing, BEC, impersonation, malware delivery, spam, and fraudulent communications.
• Determine risk using headers, sender reputation, SPF/DKIM/DMARC, URLs, attachments, domains, and message content.
• Use Proofpoint search to identify campaign scope and locate malicious messages across impacted mailboxes.
• Execute containment actions in Proofpoint: block/deny-list malicious senders, domains, URLs; manage allow/deny logic.
• Drive remediation and takedown actions and coordinate with IR/SOC when needed.
• Tune Proofpoint policies and protection controls to reduce false positives.
• Review quarantined messages and document rationale for release/block/escalation.
• Maintain block/allow lists and exception workflows with change control.
• Monitor SPF, DKIM, DMARC posture to reduce spoofing risk.
• Identify misconfigurations and coordinate with domain owners and Microsoft 365 admins.
• Support investigations involving account compromise and suspicious mailbox activity.
• Coordinate with SOC, IAM, IR, Microsoft 365, Legal, HR for sensitive investigations.
• Document investigation steps, remediation actions, and lessons learned.
• Create SOPs and response playbooks for Proofpoint-driven workflows.
• Track email-security metrics and report trends and remediation SLAs.
• Identify opportunities to automate repetitive tasks across investigation, containment, and reporting.
• Support Proofpoint enhancements, platform upgrades, policy changes, and onboarding new domains.

Skills

Proofpoint experience

Email threat analysis

MS 365 / Exchange Online

Documentation & communication

Job description

Proofpoint Email Security Analyst (BH-399561)

Location Mc Kinney, United States Sector IT

Proofpoint Email Security Analyst

Contract to Hire

McKinney, TX (Hybrid)

Responsibilities

• Monitor Proofpoint dashboards, alerts, quarantine queues, digest activity, abuse mailboxes, and user-reported phishing submissions.
• Triage and investigate email threats including phishing, business email compromise (BEC), impersonation, malware delivery, spam, and fraudulent communications.
• Determine risk using email artifacts such as headers, sender reputation, authentication results (SPF/DKIM/DMARC), URLs, attachments, domains, and message content.
• Use Proofpoint search / message tracking capabilities to identify campaign scope and locate malicious messages across impacted mailboxes.
• Execute containment actions in Proofpoint: block/deny-list malicious senders, domains, URLs, and other indicators; manage allow/deny logic where appropriate.
• Drive remediation and takedown actions (e.g., message removal guidance, user notification, escalation to IR/SOC when needed).
• Administer and continuously tune Proofpoint policies, detection rules, and protection controls to improve efficacy and reduce false positives.
• Review quarantined messages and determine whether messages should be released, blocked, or escalated, documenting rationale and outcomes.
• Maintain and refine block lists, allow lists, and exception workflows with strong change control and documentation.
• Monitor and assist with SPF, DKIM, and DMARC posture to reduce spoofing/impersonation risk.
• Identify misconfigurations and coordinate corrective actions with domain owners, Microsoft 365 administrators, and relevant business stakeholders.
• Support investigations involving account compromise, suspicious mailbox rules/forwarding, unusual email access patterns, and suspicious outbound activity.
• Coordinate with SOC, IAM, Incident Response, Microsoft 365, Legal, HR, and business leaders during sensitive investigations.
• Document investigation steps, findings, remediation actions, recurring attack patterns, and lessons learned.
• Create and maintain SOPs and response playbooks for Proofpoint-driven workflows (triage, quarantine review, campaign response, indicator blocking).
• Track and report email-security metrics: message volume, blocked threats, phishing trends, user reporting rates, false positives, remediation SLAs, and emerging TTPs.
• Identify opportunities to automate repetitive tasks across investigation, containment, and reporting.
• Support email-security projects such as Proofpoint enhancements, platform upgrades, policy changes, onboarding new domains/business units, and M&A-related integration.

Required Skills

• Demonstrated experience using Proofpoint in an operational security role (monitoring, quarantine triage, investigations, policy tuning).
• Strong knowledge of phishing/BEC tradecraft and email analysis (headers, routing, URLs/attachments, domain reputation).
• Working understanding of Microsoft 365 / Exchange Online concepts and email authentication (SPF/DKIM/DMARC).
• Strong analytical skills, attention to detail, sound judgment, and clear communication with both technical and non-technical users.
• Ability to document work cleanly and operate effectively in an alert-driven environment.

Estimated Min Rate: $45.50

Estimated Max Rate: $65.00

What’s In It for You?

We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh’s network of client companies has been employing professionals like you for over 65 years in the U.S., UK and Canada. Join Yoh’s extensive talent community that will provide you with access to Yoh’s vast network of opportunities and gain access to this exclusive opportunity available to you. Benefit eligibility is in accordance with applicable laws and client requirements. Benefits include:

• Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week)
• Health Savings Account (HSA) (for employees working 20+ hours per week)
• Life & Disability Insurance (for employees working 20+ hours per week)
• MetLife Voluntary Benefits
• Employee Assistance Program (EAP)
• 401K Retirement Savings Plan
• Direct Deposit & weekly epayroll
• Referral Bonus Programs
• Certification and training opportunities

Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply.

Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.

For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

By applying and submitting your resume, you authorize Yoh to review and reformat your resume to meet Yoh’s hiring clients’ preferences. To learn more about Yoh’s privacy practices, please see our Candidate Privacy Notice: https://www.yoh.com/privacy-notice

Stay Safe During Your Job Search Fraudulent recruiting communications have become increasingly common. Emails from Yoh recruiters will only come from an @yoh.com email address. Yoh will never ask candidates to pay fees, purchase equipment, send gift cards, or transfer funds as part of the recruiting or hiring process. If you receive a communication that appears suspicious or requests payment, contact Yoh directly before responding or sharing personal information.