Senior SOC Engineer

Proofpoint; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits

Flexible work environment

Wellness days

Job summary

Proofpoint is a global leader in cybersecurity, protecting data, people, and AI agents across email, cloud, and collaboration tools. Join our Security Operations Center to monitor threats, detect patterns, and respond rapidly in a follow-the-sun model with cross-team collaboration.

You’ll work with major ISPs and mobile operators to enhance threat detection, analysis, and remediation, continuously improving our products to stop abuse and protect customers worldwide.

Qualifications

• 5 years experience in anti-abuse email deliverability, threat or security research fields.
• Strong analytical and creative problem-solving abilities.
• Good understanding of the Internet and how malicious actors use resources.
• Proficiency in email, mobile, DNS or other messaging technologies.

Responsibilities

• Monitor detection systems and adjust for new threats.
• Develop automation and tooling to improve resilience.
• Collaborate with Engineering, Support, Threat Operations and Technical Services.
• Document threats and trends for internal/external communication.
• Support CSI remediation requests from users.

Skills

Threat research

Analytical thinking

English communication

Shell

Go

Perl

Python

SIEM

Kibana

SQL

Tools

Splunk

Kibana

SQL

Job description

About Us:

Proofpoint is a global leader in human- and agent-centric cybersecurity. We protect how people, data, and AI agents connect across email, cloud, and collaboration tools. Over 80 of the Fortune 100, 10,000 large enterprises, and millions of smaller organizations trust Proofpoint to stop threats, prevent data loss, and build resilience across their people and AI workflows. Our mission is simple: safeguard the digital world and empower people to work securely and confidently. Join us in our pursuit to defend data and protect people.

How We Work:

At Proofpoint you’ll be part of a global team that breaks barriers to redefine cybersecurity guided by our BRAVE core values:

Bold in how we dream and innovate

Responsive to feedback, challenges and opportunities

Accountable for results and best in class outcomes

Visionary in future focused problem-solving

Exceptional in execution and impact

The Role

In this role, we are looking for an intelligent, passionate person to join our Security Operations Center (SOC) team. The SOC team is responsible for the day-to-day accuracy of our products, monitoring customer data for new threats and reacting quickly when such threats occur. The team uses a follow-the sun-model and works closely with the Engineering, Support and Technical Services teams who highly value a close working relationship with the SOC.

As a member of this team, you will be working with some of the largest Internet Service Providers and Mobile Operators to ensure the highest level of threat detection, analysis and high-quality response. No two days are alike within the SOC as you react to attacks and work on broader research into our data. We’re looking for people who don’t just see an email or text message but instead see patterns or anti-abusive behavior and understand how our products see those messages. We’re looking for people with a curious mind to find ways to improve our products to detect and stop threats quickly.

What you’ll do

• Participate in the monitoring and adjustment of detection systems for new and emerging threats
• Use best practices to develop innovative automation and tooling that can improve our resilience to new and emerging threats
• Work closely with our Engineering, Support, Threat Operations and Technical Services teams to provide customers with a multi-pronged approach to efficacy
• Document threats and trends for internal and external communication
• Provide support for users submitting CSI remediation requests
• Operate within a 24x7 follow-the-sun environment (no

What we’re looking for

• 5 years experience within the anti-abuse email deliverability, threat or other security research fields
• Demonstrates strong analytical and creative problem-solving abilities
• Good understanding of the Internet and how malicious actors use available resources
• Strong technical experience with email, mobile, DNS or other messaging technologies
• Proficiency in Shell & Go preferred, Perl and Python are ok
• Strong communication skills both verbally and in writing in English,
• Document and report findings to the team
• Good knowledge of using SIEM tools such as Splunk or Kibana
• Familiarity with SQL

Nice to have

• Previous Internet Service Provider, Email Service Provider or Mobile Operator experience
• Familiarity writing regular (regex) expressions
• Understanding of operating systems and network protocol
• Proficiency in a non-English language

Why Proofpoint?

At Proofpoint, we believe that an exceptional career experience includes a comprehensive compensation and benefits package. Here are just a few reasons you’ll love working with us:

• Competitive compensation
• Comprehensive benefits
• Career success on your terms
• Flexible work environment
• Annual wellness and community outreach days
• Always on recognition for your contributions
• Global collaboration and networking opportunities

_ _

Our Culture:

Our culture is rooted in values that inspire belonging, empower purpose and drive success-every day, for everyone.

We encourage applications from individuals of all backgrounds, experiences, and perspectives. If you need accommodation during the application or interview process, please reach out to [e-mail].