Senior Cyber Security Email Engineer
Role details
Job location
Tech stack
Job description
As Senior Cyber Security Email Engineer, you will take lead on design, implementation and administering and governing the core email security gateway for Sky Group. You will be part of the core Cyber Defence function aligned with safeguarding the enterprise against cyber security threats. You must possess an expert-level knowledge of email security, with a particular focus on the Proofpoint email platform. You will also work closely with business and technology stakeholders and product owners in other IT and security teams to ensure that systems are secure and compliant with relevant regulations and standards.
What you'll do
- Lead collaboration with other teams and take a proactive approach to improving email security.
- Mentor engineers and analysts on security best practices and contribute to their development.
- Administer, configure, and maintain the Proofpoint Enterprise Protection platform.
- Develop and fine-tune email security policies, rules, and filters.
- Monitor Proofpoint logs and dashboards for suspicious activity and perform regular performance tuning.
- Investigate and respond to email security incidents, including phishing, Business Email Compromise (BEC), and malware attacks.
- Analyse email headers, URLs, and attachments to identify malicious content and attacker tactics.
- Generate reports and develop Key Performance Indicators (KPIs) on email security posture, threat trends, and platform effectiveness.
- Collaborate with vendor and internal technology/security teams on system integration, documentation, and employee security awareness training.
- Lead or participate in projects focused on email security enhancements, migrations, or new technology implementations, * Lead collaboration with other teams and take a proactive approach to improving email security.
- Mentor engineers and analysts on security best practices and contribute to their development.
- Administer, configure, and maintain the Proofpoint Enterprise Protection platform.
- Develop and fine-tune email security policies, rules, and filters.
- Monitor Proofpoint logs and dashboards for suspicious activity and perform regular performance tuning.
- Investigate and respond to email security incidents, including phishing, Business Email Compromise (BEC), and malware attacks.
- Analyse email headers, URLs, and attachments to identify malicious content and attacker tactics.
- Generate reports and develop Key Performance Indicators (KPIs) on email security posture, threat trends, and platform effectiveness.
- Collaborate with vendor and internal technology/security teams on system integration, documentation, and employee security awareness training.
- Lead or participate in projects focused on email security enhancements, migrations, or new technology implementation
Requirements
Cissp, Giac, * Recent hands-on experience in an email security-focused role, with a strong emphasis on Proofpoint.
- Experience in architectural design and implementation of email security platforms.
- Experience in leading a technical team, providing mentorship and guidance to junior engineers.
- Demonstrable expert-level proficiency in administering and configuring the Proofpoint email security platform, including:
- Proofpoint On Demand (PoD): Email filtering, anti-spam, anti-virus, policy management.
- Proofpoint Targeted Attack Protection (TAP): URL Defence, Attachment Defence, Email Warning Tags.
- Proofpoint Email Fraud Defense (EFD): DMARC, DKIM, SPF implementation and monitoring.
- Experience with other Proofpoint modules (e.g. SER, CTR, IMD) is a significant advantage.
- Solid understanding of email protocols (SMTP, POP3, IMAP) and email flow.
- Understanding of M365/exchange environments including Defender policies.
- In-depth knowledge of common email-borne threats and attack techniques (phishing, spoofing, malware, ransomware, BEC).
- Familiarity with security frameworks and standards (e.g., NIST, ISO 27001).
- Experience with scripting languages (e.g., PowerShell, Python) for automation is a plus.
- Excellent analytical and problem-solving skills.
- Strong communication skills (written and verbal) with the ability to explain complex technical concepts to non-technical audiences.
- Ability to work independently and as part of a team in a fast-paced environment., * Relevant industry certifications (e.g., Proofpoint Certified Security Professional, CompTIA Security+, CISSP, GIAC).
- Experience with other email security solutions or security information and event management (SIEM) platforms.
- Understanding of cloud security principles (e.g., Microsoft 365, Google Workspace email security features).