Product Security Engineer / Architect

• Define and drive the enterprise email security strategy, architecture, and roadmap.
• Lead evaluation, implementation, and improvement of enterprise email security technologies.
• Partner with the GTS Email Platform team to design and deploy security capabilities across the email ecosystem.
• Collaborate with the Cyber Defense Center (CDC) on detection, investigation, and response for phishing, BEC, account takeover, and other email threats.
• Work with Threat Intelligence, Identity Security, and Incident Response teams to identify emerging threats and strengthen defensive controls.
• Lead product evaluations, POCs, and vendor assessments for email security technologies.
• Integrate email security solutions with SIEM, SOAR, identity, endpoint, and threat intelligence platforms.
• Develop security standards, architectural patterns, and implementation guidance.
• Track email threat protection, phishing resilience, and risk-reduction metrics.
• Serve as a Subject Matter Expert (SME) for enterprise email security initiatives.

Required Technical Skills

• Enterprise email security platforms such as:
• Microsoft Defender for Office 365
• Proofpoint
• Abnormal Security

• Strong knowledge of:
• SPF
• DKIM
• DMARC
• SMTP security
• Email authentication frameworks
• Experience designing and implementing enterprise-scale email security controls and architectures.
• Experience integrating email security platforms with:
• SIEM
• SOAR
• Identity platforms
• Endpoint security
• Threat Intelligence solutions
• Strong automation, scripting, analytical, and problem-solving skills.
• Excellent communication and stakeholder-management skills.

Required Experience

• 8+ years of experience in cybersecurity, security engineering, or security architecture.
• 5+ years of hands-on experience with email security technologies and threat protection solutions.
• Experience developing security strategies, roadmaps, and architecture standards.
• Ability to translate cybersecurity risks into actionable technical solutions.
• Experience working across Cybersecurity, GTS, and Engineering organizations., * Bachelor’s degree in Computer Science, Information Security, Engineering, or related technical discipline, or equivalent practical experience.
• Financial services or other regulated-industry experience.
• Experience with emerging AI-driven phishing, impersonation, and social-engineering threats.
• Certifications such as:
• CISSP
• CCSP
• GIAC
• Microsoft Security certifications