Senior Cloud Email Security Analyst

Greenberg Traurig, LLP; Phoenix (AZ); Hybrid; USD 120,000 - 165,000; Full time

Benefits offered by this job

Hybrid work model

Benefits package

Job summary

Greenberg Traurig, LLP seeks a Senior Cloud Email Security Analyst to support and enhance our cloud email security in a large Microsoft 365 environment.

You will administer Proofpoint and M365 security, investigate threats, and coordinate with Security, Legal, and vendors. The role reports to the Director of Enterprise Messaging and offers a hybrid work model across multiple offices.

Qualifications

• Bachelor’s degree in Cybersecurity or related field; equivalent experience accepted.
• 6+ years in enterprise messaging or cybersecurity with 3+ years in email security in M365.
• Experience with Proofpoint, Exchange Online, EOP, and Defender for Office 365.
• Ability to investigate email threats and manage secure mail flow and policies.

Responsibilities

• Administers and tunes Proofpoint and Microsoft 365 email security.
• Supports Exchange Online, EOP, Defender for Office 365 mail flow and protection.
• Maintains inbound/outbound mail flow in cloud and hybrid environments.
• Manages SPF, DKIM, DMARC, TLS, DNS, certificates, and onboarding.
• Investigates phishing, BEC, spoofing, malware, and other threats.
• Performs threat hunting, logs review, and remediation activities.
• Automates tasks with PowerShell and APIs; creates docs and reports.
• Collaborates with teams and vendors on incidents and changes.
• Participates in DR, maintenance, and on-call rotations.

Skills

Proofpoint administration

Microsoft 365 security

Exchange Online

PowerShell

Microsoft Graph

SIEM concepts

Email authentication

Communication skills

Problem solving

Education

Bachelor’s degree in Cybersecurity

Current Proofpoint certification

Current Microsoft security certification

Security+ / CISSP / CCSP / GIAC

Tools

Proofpoint

Exchange Online

Microsoft Defender for Office 365

Microsoft Graph

REST APIs

Job description

Greenberg Traurig (GT), a global law firm with locations across the world in 15 countries, has an exciting employment opportunity for you. We offer competitive compensation and an excellent benefits package along with the opportunity to work within an innovative and collaborative environment.

Join our Technology Team team as a Senior Cloud Email Security Analyst located in various offices.

We are seeking a professional who thrives in a fast-paced, deadline-driven environment. The ideal candidate possesses strong problem-solving and decision-making abilities, ensuring efficiency and accuracy in every task. With a dedicated work ethic and a can-do attitude, you will take initiative and approach challenges with confidence and resilience. Excellent communication skills are essential for collaborating effectively across teams and delivering exceptional client service. If you are someone who demonstrates initiative, adaptability, and innovation, we invite you to join our team.

This role can be based in various offices on a hybrid basis. This role reports to the Director of Enterprise Messaging.

Position Summary:

Under the direction of the Enterprise Messaging Manager, the Senior Cloud Email Security Analyst supports and improves the organization’s cloud email security services. This role administers email security platforms, investigates email-based threats, maintains secure mail flow and authentication controls, and works with Technology, Information Security, Legal, and vendors to protect a large Microsoft 365 environment. The analyst works independently on complex issues, provides senior-level technical guidance, and helps improve operational procedures and security controls.

Key Responsibilities:

• Administers, monitors, maintains, and tunes enterprise email security platforms, primarily Proofpoint and Microsoft 365 email security services.
• Supports Exchange Online, Exchange Online Protection, Microsoft Defender for Office 365, and related mail-flow and threat-protection features.
• Maintains and troubleshoots inbound, outbound, internal, application, partner, and secure-relay mail flow in cloud and hybrid environments.
• Manages email authentication and domain-protection controls, including SPF, DKIM, DMARC, TLS, DNS records, certificates, and third-party sender onboarding.
• Investigates phishing, business email compromise, spoofing, malware, malicious links or attachments, account compromise, and other email-related security events.
• Performs message tracing, header and URL analysis, threat hunting, log review, evidence collection, containment, and post-delivery remediation.
• Uses PowerShell and available APIs to automate routine administration, reporting, monitoring, and remediation activities.
• Coordinates with Information Security, Identity, Compliance, Legal, Service Desk, application teams, and vendors on incidents, changes, and email security requirements.
• Creates and maintains technical documentation, procedures, change records, test plans, service reports, and operational metrics.
• Provides senior escalation support, shares knowledge with other support teams, and assists with vendor evaluations, upgrades, and security improvements.
• Participates in disaster recovery, control testing, scheduled maintenance, and an on-call rotation for urgent incidents or service-impacting events.
• Performs other duties as assigned or required.

Qualifications:

_Skills and Competencie_s

• Strong hands‑on experience administering Proofpoint enterprise email security products and Microsoft 365 email security services.
• Strong knowledge of Exchange Online, EOP, Microsoft Defender for Office 365, mail routing, connectors, transport rules, quarantine, and message tracing.
• Strong understanding of SMTP, MIME, DNS, email headers, TLS, certificates, SPF, DKIM, DMARC, and common third‑party sending services.
• Experience investigating and responding to phishing, business email compromise, spoofing, account compromise, malware, and other email‑based threats.
• Proficiency with PowerShell and familiarity with Microsoft Graph, REST APIs, security analytics, and SIEM concepts.
• Working knowledge of Microsoft Entra ID, role‑based access, Conditional Access, and Microsoft Purview capabilities related to email.
• Ability to manage multiple priorities, follow change and incident‑management processes, and produce clear technical documentation.
• Strong analytical, communication, collaboration, and customer‑service skills, including the ability to explain technical risk to non‑technical stakeholders.

_Education & Prior Experience _

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.
• At least 6 years of progressive experience in enterprise messaging or cybersecurity, including 3 years of direct email security administration in a Microsoft 365 environment.
• Production experience with Proofpoint, Exchange Online, EOP, and Microsoft Defender for Office 365.
• Experience handling complex email security incidents, platform changes, policy updates, upgrades, or service improvements.
• Experience in a large, distributed, highly available, or regulated environment is preferred.

Preferred Certifications

• Current Proofpoint email security certification.
• Current Microsoft security, identity, messaging, or security operations certification.
• Security+, CISSP, CCSP, GIAC, or another relevant cybersecurity certification.

Additional Expectations

• Maintain current knowledge of email security threats, product changes, vulnerabilities, and industry practices.
• Exercise discretion when handling confidential, privileged, client, personnel, and security-sensitive information.
• Work effectively in a remote or distributed team and be available for scheduled maintenance or urgent response outside normal business hours when required.

Physical Requirements:

• While performing the duties of this job, the employee is occasionally required to move from workstation or desk throughout the work area to work independently or with a team to meet with colleagues or supervisor and retrieve work assignments.
• This position may also be sedentary and require the employee to sit for extended periods of time.
• Requires manual dexterity to use a phone, enter data into a computer, handle objects, and use office equipment.

GT is an EEO employer with an inclusive workplace committed to merit‑based consideration and review without regard to an individual’s race, sex, or other protected characteristics and to the principles of non‑discrimination on any protected basis.