Email Security Operations

Our client, a public sector company, is looking to hire a Email Security Operations in Downey CA

Pay Rate Range:  $65/hr - $70/hr

Job Title:    Email Security Operations
Location:    Downey ,CA 90242 - Remote
Duration:  12 Months  

Position Description / Responsibilities

• Serve as a Security Engineer for complex technology implementations in a product-centric environment.
• Bridge the gap between legacy development and operations teams while promoting a shared security culture and vision.
• Ensure developers build secure systems while protecting the privacy of system users.
• Perform security audits, risk analysis, application-level vulnerability testing, and security code reviews.
• Develop and implement technical solutions to identify, mitigate, and reduce security vulnerabilities.
• Conduct security research to identify emerging threats, attack vectors, and potential vulnerabilities.
• Apply white-hat hacking techniques and fundamental computer science concepts to strengthen security.
• Safeguard sensitive data against cyberattacks and unauthorized access.
• Investigate and mitigate email security threats, including phishing, business email compromise (BEC), malware, spam, impersonation, and account compromise.
• Troubleshoot complex email security, authentication, and mail-flow issues.
• Collaborate with technology vendors to resolve configuration, security, and email-delivery problems.
• Follow change control procedures and maintain technical documentation, procedures, and end-user instructions.

Required Technical Skills
1. Email Security Solutions

• In-depth knowledge of administering and configuring Proofpoint Core Email Protection.
• Experience with Proofpoint Secure Email Gateway (SEG) and API-based deployments.
• Hands-on experience with Abnormal Security and advanced phishing protection solutions.
• Experience managing Proofpoint email protection features, including:
  • Email blacklisting and sender reputation management.
  • Threat detection and email filtering.
  • Email security policies and configurations.
• Knowledge of advanced phishing protection tools, including Cisco CMD and Darktrace.

2. Microsoft Email and Security Technologies

• Experience supporting Microsoft Exchange Server (on-premises).
• Hands-on experience with Exchange Online and Microsoft 365.
• Knowledge of Azure Active Directory (Azure AD).
• Experience supporting Windows Defender and Microsoft Defender in email security environments.
• Ability to troubleshoot Microsoft email security configurations and mail-flow issues.

3. Email Authentication and DNS

• Strong understanding of SMTP and email authentication protocols, including:
  • SPF (Sender Policy Framework).
  • DKIM (DomainKeys Identified Mail).
  • DMARC (Domain-based Message Authentication, Reporting, and Conformance).
• Ability to interpret DMARC policies and reports.
• Experience troubleshooting SPF/DKIM authentication and alignment issues.
• In-depth knowledge of email-related DNS records, including:
  • MX records.
  • A records.
  • CNAME records.
  • TXT records.
  • PTR records.
• Experience coordinating with third-party vendors to resolve email authentication and delivery issues.

4. Cybersecurity Tools and Technologies

• Intrusion Detection and Prevention Systems (IDS/IPS).
• Two-factor and Multifactor Authentication (2FA/MFA).
• Security Information and Event Management (SIEM).
• Data Loss Prevention (DLP).
• Log correlation and analysis.
• SOC-as-a-Service (SOCaaS).
• Incident response and threat investigation.
• Retroactive malware analysis.
• Raw log analysis, cleanup, and restoration.
• Risk and vulnerability management.
• Secureworks Taegis XDR/MDR.
• PRTG monitoring.

5. SIEM and Threat Investigation

• Experience using SIEM platforms to query and analyze historical email data and logs.
• Ability to investigate security incidents and identify suspicious email activity.
• Experience correlating logs to identify phishing, malware, account compromise, and other email-based threats.
• Ability to investigate and mitigate email security incidents.
• Knowledge of incident response procedures and threat remediation.

6. Email Infrastructure and System Management

• Experience integrating cloud-based email services with on-premises Secure Email Gateway (SEG) solutions.
• Ability to maintain consistent email security across cloud and on-premises environments.
• Experience monitoring and optimizing email security systems to handle large volumes of email traffic efficiently.
• Experience planning and executing email security platform migrations with minimal downtime.
• Ability to troubleshoot complex mail-flow issues and identify email security configuration anomalies.
• Experience implementing security changes while following established change control procedures.

7. Compliance and Documentation

• Knowledge of email-related compliance requirements, including HIPAA.
• Ability to develop and maintain technical documentation, standard operating procedures, and troubleshooting guides.
• Ability to create technical instructions for security teams, IT staff, and end users.
• Experience collaborating with vendors and internal teams to resolve technical issues and maintain compliance.

Required Experience
1. Overall Security Engineering Experience

• Minimum 10 years of experience developing and implementing technical solutions to mitigate security vulnerabilities.

2. Cybersecurity Tools and Technologies

• Minimum 3 years of experience within the last 4 years working with cybersecurity tools and technologies, including:
  • IDS/IPS.
  • 2FA/MFA.
  • SIEM and log correlation.
  • DLP.
  • SOCaaS.
  • Incident response.
  • Retroactive malware analysis.
  • Raw log analysis, cleanup, and restoration.
  • Risk and vulnerability management.
  • Secureworks Taegis XDR/MDR.

3. Email Security Solutions

• Minimum 3 years of experience within the last 4 years with:
  • Proofpoint Email Protection Gateway.
  • Advanced phishing protection solutions such as Abnormal Security, Cisco CMD, and Darktrace.
  • Microsoft 365 and Azure AD.
  • Exchange Online.
  • Windows Defender.
  • PRTG monitoring.

4. Cloud and On-Premises Email Integration

• Minimum 3 years of experience within the last 4 years integrating cloud-based email services with on-premises Secure Email Gateway (SEG) solutions.
• Ability to maintain consistent security policies across cloud and on-premises email platforms.

5. Email Security Monitoring and Optimization

• Minimum 3 years of experience within the last 4 years monitoring and optimizing email security systems to support high volumes of email traffic.
• Experience improving email security performance, reliability, and threat detection capabilities.

6. Email Security Migrations

• Minimum 3 years of experience within the last 4 years planning and executing email security system migrations between platforms.
• Ability to minimize downtime and maintain email security throughout migration activities.

7. Proofpoint Administration

• Minimum 3 years of experience within the last 4 years administering Proofpoint Email Protection Gateway.
• Experience managing email blacklisting, sender reputation, filtering policies, and other Proofpoint features.

8. Email Authentication

• Minimum 3 years of experience within the last 4 years interpreting DMARC policies and reports.
• Experience troubleshooting SPF and DKIM authentication and alignment issues.

Education Requirements

• Minimum Bachelor of Science degree in Computer Science or a related field.
• A degree in IT or Engineering may also satisfy the general education requirement.
• Additional qualifying experience may be substituted for the required education on a year-for-year basis, subject to the applicable classification requirements.

For workers in the United States, PrideGlobal and it's affiliates offers eligible employee’s comprehensive healthcare coverage (medical, dental, and vision plans), supplemental coverage (accident insurance, critical illness insurance and hospital indemnity), 401(k)-retirement savings, life & disability insurance, an employee assistance program, legal support, pet insurance and employee discounts with preferred vendors.

Equal Employment Opportunity
PrideGlobal and it's affiliates are an equal opportunity employer. We do not discriminate on the basis of the race, religious creed, color, national origin, ancestry, physical disability, mental disability, reproductive health decision making, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, veteran or military status, or any other characteristic protected by applicable federal, state, or local law.

Fair Chance Employment
PrideGlobal and it's affiliates are a Fair Chance employer. We consider all qualified applicants, including those with criminal histories, in a manner consistent with applicable state and local Fair Chance laws and ordinances, including, the California Fair Chance Act and all applicable local Fair Chance ordinances.

Accommodations
We are committed to providing reasonable accommodations to applicants and employees with disabilities. If you require a reasonable accommodation to participate in the application or interview process, or to perform the essential functions of this role, please contact us.

Only applicable for San Francisco Candidates: Under the San Francisco Lactation in the Workplace Ordinance, we will provide written notice of lactation accommodation rights, and this notice will automatically be given upon hiring, any inquiry of parental leave or lactation accommodation.

Only applicable for Kentucky positions: For this type of employment, state law requires a criminal record check as a condition of employment. This applies to direct care staff (Examples: RN, LPN, Nurse Aides, Therapists) referred to Kentucky nursing facilities, assisted living communities, or long-term care facilities, in accordance with KRS 216.793.