Email security

The Email Security Engineer is responsible for supporting, managing, and enhancing enterprise email security infrastructure. This role involves troubleshooting email security issues, implementing threat protection measures, ensuring compliance with security policies, and assisting with incident response.

1. Email Security Operations & Support:

• Provide L2/L3 support for email security-related incidents and service requests.
• Monitor and analyze email security logs to detect and mitigate threats.
• Investigate and resolve email delivery issues, spam filtering problems, and phishing incidents.
• Manage and maintain email security configurations across Microsoft Defender for Office 365, Exchange Online Protection (EOP), Proofpoint, Mimecast, or other email security solutions.

2. Threat Protection & Incident Handling:

• Respond to email-based security incidents, including phishing, and malware attacks.
• Enforce email authentication policies such as DKIM, DMARC, and SPF.
• Work with SOC and threat intelligence teams to analyze suspicious email traffic and implement mitigation strategies.
• Assist in forensic investigations and root cause analysis for email security breaches.

3. Compliance & Policy Management:

• Ensure compliance with GDPR, HIPAA, ISO 27001 and other regulatory requirements.
• Apply and maintain email security policies based on industry best practices.
• Assist in audits and risk assessments related to email security.

4. Email Security Optimization & Automation:

• Optimize email security policies to enhance protection while minimizing false positives.
• Automate email security operations using PowerShell or Python.
• Support SIEM/SOAR integrations for proactive email threat monitoring.

5. Collaboration & Documentation:

• Work closely with IT security, compliance, and infrastructure teams to ensure alignment of email security measures.
• Maintain accurate documentation for email security configurations, policies, and incident response procedures.
• Provide knowledge transfer and technical training for required support teams.