Position Description
A Security Engineer serves as the security engineer of complex technology implementations in a product-centric environment; is comfortable with bridging the gap between legacy development or operations teams and working toward a shared culture and vision; works to ensure developers create the most secure systems while enhancing the privacy of all system users; and has experience with white-hat hacking and fundamental computer science concepts. The Security Engineer will perform security audits, risk analysis, application-level vulnerability testing, and security code reviews; develop and implement technical solutions to help mitigate security vulnerabilities; and conduct research to identify new attack vectors.
 
Skills Required             
Security Engineers will possess knowledge and experience in safeguarding sensitive data from cyber-attacks.           
Possess in-depth knowledge of administering and configuring Proofpoint Core Email Protection, including secure email gateway (SEG) and API-based deployments, and Abnormal Security.
Possess in-depth knowledge of supporting Microsoft Exchange Server (on-premises), Exchange Online, and Windows Defender/Microsoft Defender in an email security environment.
Possess in-depth knowledge of interpreting DMARC policies and reports, troubleshooting SPF and DKIM authentication and alignment issues, and coordinating with third-party vendors to resolve configuration and email-delivery problems.
Strong understanding of SMTP and email authentication, including SPF, DKIM, and DMARC. Possess in-depth knowledge of email-related DNS records, including MX, A, CNAME, TXT, and PTR records.
Possess in-depth knowledge of SIEM platforms to query and analyze historical email data and logs for threat investigations and incident response. Ability to identify, investigate, and mitigate email threats, including phishing, business email compromise, malware, spam, impersonation, and account compromise.
Knowledge of email-related compliance requirements, such as HIPAA.
Ability to identify configuration issues and security anomalies, work with technology vendors to resolve problems, and follow change control procedures.
Ability to apply advanced troubleshooting skills for complex email security and mail-flow issues.
Ability to create and maintain technical documentation, procedures, and instructions for both technical staff and end users. Ability to develop and implement technical solutions that reduce security vulnerabilities.
 
Experience Required
This classification must have a minimum of ten (10) years of experience with developing and implementing technical solutions to help mitigate security vulnerabilities.           
-Minimum of three (3) years of work experience within the last 4 years with cybersecurity tools and technologies, including IDS/IPS, two-factor and multifactor authentication (2FA/MFA), SIEM, DLP, log correlation, SOC-as-a-Service (SOCaaS), incident response, retroactive malware analysis, raw logs, cleanup and restoration, risk and vulnerability management, and Secureworks Taegis XDR/MDR.
-Minimum of three (3) years of work experience within the last 4 years with security solutions, including Proofpoint Email Protection Gateway; advanced phishing protection such as Abnormal, Cisco CMD, and Darktrace; Microsoft 365, Azure AD, Exchange Online, and Windows Defender; and PRTG monitoring.
-Minimum of three (3) years of work experience within the last 4 years integrating cloud-based email services with on-premises secure email gateway (SEG) solutions to maintain consistent security across platforms.
-Minimum of three (3) years of work experience within the last 4 years monitoring and optimizing email security systems to handle large volumes of email traffic efficiently.
-Minimum of three (3) years of work experience within the last 4 years planning and executing email security system migrations between platforms with minimal downtime.
-Minimum of three (3) years of work experience within the last 4 years with Proofpoint Email Protection Gateway, including managing email blacklisting, sender reputation, and all other features of Proofpoint.
-Minimum of three (3) years of work experience within the last 4 years interpreting DMARC policies and reports, troubleshooting SPF and DKIM authentication and alignment issues.         
 
Education Required
Minimum Bachelor of Science degree in Computer Science or a related field.