> Markdown version of [/jobs/ext/1295222-product-security-engineer-architect-email-security](https://www.wearedevelopers.com/jobs/ext/1295222-product-security-engineer-architect-email-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Product Security Engineer / Architect - Email Security - **Company:** State Street - **Location:** Boston, MA, United States - **Experience:** Expert - **Salary:** $120,000.0 - $202,500.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Architectural Patterns, Cyber Security, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Identity and Access Management, Simple Mail Transfer Protocols, Microsoft Security Essentials, Microsoft Office, Phishing, Security Information and Event Management, Systems Integration, Scripting, Software Security, Malware, Cyber Threat Analysis, Sender Policy Framework (SPF), Spoofing, Information Technology, Cyber Warfare, Data Pipelines, Cisco - **Published:** July 16, 2026 - **Apply:** https://www.jofdav.com/jobs/58857222-product-security-engineer-architect-email-security ## About the Role * Experience with enterprise email security technologies such as Microsoft Defender for Office 365, Proofpoint, Abnormal Security, Mimecast, Cisco Secure Email, or similar platforms. * Strong understanding of phishing, business email compromise (BEC), account takeover, malware, social engineering, and email-based threats. * Knowledge of email security technologies including SPF, DKIM, DMARC, SMTP security, and email authentication frameworks. * Experience designing and implementing enterprise-scale email security controls and architectures. * Experience integrating email security platforms with SIEM, SOAR, identity, endpoint, and threat intelligence solutions. * Strong analytical, problem-solving, automation, and scripting skills. * Excellent communication and stakeholder management skills., * Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience. * 8+ years of experience in cybersecurity, security engineering, or security architecture. * 5+ years of hands-on experience with email security technologies and threat protection solutions. * Experience working in financial services or other regulated industries preferred. * Relevant certifications such as CISSP, CCSP, GIAC, or Microsoft Security certifications preferred. Additional Requirements * Experience developing security strategies, roadmaps, and architecture standards. * Familiarity with emerging AI-driven phishing, impersonation, and social engineering threats. * Strong collaboration skills and ability to work across Cyber Security, GTS, and Engineering organizations. * Ability to translate security risks into actionable technical solutions. Work Requirement * Hybrid work model in accordance with company policy. * Ability to collaborate effectively with global teams across multiple time zones. * Standard business hours with flexibility to support critical security incidents and initiatives when required. ## Description * Define and drive the enterprise email security strategy, architecture, and roadmap. * Lead the evaluation, implementation, and continuous improvement of email security technologies and controls. * Partner with the GTS Email Platform team, which owns and operates the enterprise email infrastructure, to design and deploy security capabilities across the email ecosystem. * Collaborate with the Cyber Defense Center (CDC) to enhance detection, investigation, and response capabilities for phishing, business email compromise (BEC), account takeover, and other email-borne threats. * Work with Threat Intelligence, Identity Security, and Incident Response teams to identify emerging threats and improve defensive controls. * Lead product evaluations, proof-of-concepts, and vendor assessments for email security technologies. * Drive integration of email security solutions with security monitoring, analytics, and response platforms. * Develop security standards, architectural patterns, and implementation guidance for email security controls. * Track and report key metrics related to email threat protection, phishing resilience, and risk reduction. * Serve as a subject matter expert for enterprise email security initiatives. ## Related Videos - [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)