Senior Cloud Email Security Analyst

Greenberg Traurig, LLP; Dallas (TX); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Greenberg Traurig, LLP seeks a Senior Cloud Email Security Analyst to join our Technology Team across offices on a hybrid basis. You will administer Proofpoint and Microsoft 365 email security, monitor threats, and optimize mail security controls in a large, distributed environment.

Reporting to the Enterprise Messaging Director, you will automate tasks with PowerShell, coordinate with Information Security and Legal, handle incidents, and contribute to security improvements while documenting

Qualifications

• Bachelor’s degree or equivalent in a related field
• 6+ years in enterprise messaging or cybersecurity
• 3+ years of Microsoft 365 email security administration
• Production experience with Proofpoint, Exchange Online, EOP, and Defender for Office 365
• Experience handling complex email security incidents and policy updates
• Experience in large distributed or regulated environments preferred

Responsibilities

• Administers and tunes Proofpoint and Microsoft 365 email security services
• Supports Exchange Online and related mail-flow features
• Maintains cloud and hybrid mail flow and security controls
• Manages email authentication (SPF, DKIM, DMARC) and DNS records
• Investigates phishing, BEC, spoofing, malware and other threats
• Performs tracing, analysis, threat hunting, and remediation
• Uses PowerShell and APIs to automate tasks and reporting
• Collaborates with Information Security, Legal, and vendors on incidents
• Creates documentation, procedures, and service reports
• Provides escalation support and participates in upgrades and DR testing
• Participates in on-call rotations and maintenance

Skills

Proofpoint administration

Exchange Online

EOP (Exchange Online Protection)

Defender for Office 365

PowerShell scripting

Microsoft Graph / REST APIs

DNS / SPF / DKIM / DMARC

SIEM concepts

Documentation & communication

Education

Bachelor’s degree in Cybersecurity or related field

6+ years in enterprise messaging or cybersecurity

3+ years in email security administration (Microsoft 365)

Proofpoint, Exchange Online, EOP, Defender for Office 365 experience

AdditionalCertifications in security (preferred)

Tools

Proofpoint

Exchange Online

Microsoft Defender for Office 365

PowerShell

Microsoft Graph

REST APIs

Job description

Greenberg Traurig (GT), a global law firm with locations across the world in 15 countries, has an exciting employment opportunity for you. We offer competitive compensation and an excellent benefits package along with the opportunity to work within an innovative and collaborative environment.

Join our Technology Team team as a Senior Cloud Email Security Analyst located in various offices.

We are seeking a professional who thrives in a fast-paced, deadline-driven environment. The ideal candidate possesses strong problem-solving and decision-making abilities, ensuring efficiency and accuracy in every task. With a dedicated work ethic and a can-do attitude, you will take initiative and approach challenges with confidence and resilience. Excellent communication skills are essential for collaborating effectively across teams and delivering exceptional client service. If you are someone who demonstrates initiative, adaptability, and innovation, we invite you to join our team.

This role can be based in various offices on a hybrid basis. This role reports to the Director of Enterprise Messaging.

Position Summary

Under the direction of the Enterprise Messaging Manager, the Senior Cloud Email Security Analyst supports and improves the organization’s cloud email security services. This role administers email security platforms, investigates email-based threats, maintains secure mail flow and authentication controls, and works with Technology, Information Security, Legal, and vendors to protect a large Microsoft 365 environment. The analyst works independently on complex issues, provides senior-level technical guidance, and helps improve operational procedures and security controls.

Key Responsibilities

• Administers, monitors, maintains, and tunes enterprise email security platforms, primarily Proofpoint and Microsoft 365 email security services.
• Supports Exchange Online, Exchange Online Protection, Microsoft Defender for Office 365, and related mail-flow and threat-protection features.
• Maintains and troubleshoots inbound, outbound, internal, application, partner, and secure-relay mail flow in cloud and hybrid environments.
• Manages email authentication and domain-protection controls, including SPF, DKIM, DMARC, TLS, DNS records, certificates, and third-party sender onboarding.
• Investigates phishing, business email compromise, spoofing, malware, malicious links or attachments, account compromise, and other email-related security events.
• Performs message tracing, header and URL analysis, threat hunting, log review, evidence collection, containment, and post-delivery remediation.
• Uses PowerShell and available APIs to automate routine administration, reporting, monitoring, and remediation activities.
• Coordinates with Information Security, Identity, Compliance, Legal, Service Desk, application teams, and vendors on incidents, changes, and email security requirements.
• Creates and maintains technical documentation, procedures, change records, test plans, service reports, and operational metrics.
• Provides senior escalation support, shares knowledge with other support teams, and assists with vendor evaluations, upgrades, and security improvements.
• Participates in disaster recovery, control testing, scheduled maintenance, and an on-call rotation for urgent incidents or service-impacting events.
• Performs other duties as assigned or required.

Qualifications

Skills and Competencies

• Strong hands-on experience administering Proofpoint enterprise email security products and Microsoft 365 email security services.
• Strong knowledge of Exchange Online, EOP, Microsoft Defender for Office 365, mail routing, connectors, transport rules, quarantine, and message tracing.
• Strong understanding of SMTP, MIME, DNS, email headers, TLS, certificates, SPF, DKIM, DMARC, and common third-party sending services.
• Experience investigating and responding to phishing, business email compromise, spoofing, account compromise, malware, and other email-based threats.
• Proficiency with PowerShell and familiarity with Microsoft Graph, REST APIs, security analytics, and SIEM concepts.
• Working knowledge of Microsoft Entra ID, role-based access, Conditional Access, and Microsoft Purview capabilities related to email.
• Ability to manage multiple priorities, follow change and incident-management processes, and produce clear technical documentation.
• Strong analytical, communication, collaboration, and customer-service skills, including the ability to explain technical risk to non-technical stakeholders.

Education & Prior Experience

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.
• At least 6 years of progressive experience in enterprise messaging or cybersecurity, including 3 years of direct email security administration in a Microsoft 365 environment.
• Production experience with Proofpoint, Exchange Online, EOP, and Microsoft Defender for Office 365.
• Experience handling complex email security incidents, platform changes, policy updates, upgrades, or service improvements.
• Experience in a large, distributed, highly available, or regulated environment is preferred.

Preferred Certifications

• Current Proofpoint email security certification.
• Current Microsoft security, identity, messaging, or security operations certification.
• Security+, CISSP, CCSP, GIAC, or another relevant cybersecurity certification.

Additional Expectations

• Maintain current knowledge of email security threats, product changes, vulnerabilities, and industry practices.
• Exercise discretion when handling confidential, privileged, client, personnel, and security-sensitive information.
• Work effectively in a remote or distributed team and be available for scheduled maintenance or urgent response outside normal business hours when required.

Physical Requirements

• While performing the duties of this job, the employee is occasionally required to move from workstation or desk throughout the work area to work independently or with a team to meet with colleagues or supervisor and retrieve work assignments.
• This position may also be sedentary and require the employee to sit for extended periods of time.
• Requires manual dexterity to use a phone, enter data into a computer, handle objects, and use office equipment.

GT is an EEO employer with an inclusive workplace committed to merit‑based consideration and review without regard to an individual’s race, sex, or other protected characteristics and to the principles of non‑discrimination on any protected basis.