Senior Security Engineer Proofpoint & VM

Position Title: Senior Security Engineer – Proofpoint & VM
Location: US, Remote work, Onshore
Duration: Long Term Contract
 
Job description:
We are looking for a Security Engineer with hands-on experience in Proofpoint Email Security, Vulnerability Management, and Incident Response skills. The candidate will support day-to-day security operations, email threat monitoring and remediation, vulnerability tracking, remediation coordination, and incident handling. Exposure to CrowdStrike Endpoint Security will be considered an added advantage.
 
Basic Qualifications:

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.

• 5 to 8 years of experience in cybersecurity operations, email security, vulnerability management, or incident response.
• Hands-on experience with Proofpoint solutions such as PPS, TAP, TRAP, DLP, URL Defense, and Attachment Defense.
• Working knowledge of phishing analysis, email threat campaigns, malware indicators, and malicious payload investigation.
• Experience with vulnerability scanning tools such as Qualys, Tenable, Rapid7, Wiz, or similar platforms.
• Understanding of CVE, CVSS, remediation prioritization, patching workflows, and risk-based vulnerability management.
• Basic understanding of incident response lifecycle, alert triage, evidence collection, escalation, and documentation.
• Familiarity with Microsoft 365, Exchange Online, hybrid mail environments, SMTP, DNS, TLS, and mail-flow routing.
• Exposure to CrowdStrike Falcon endpoint security is preferred.

• Knowledge of SIEM/SOAR workflows and SOC operations.
• Exposure to CrowdStrike Falcon, Defender, or other EDR tools.
• Understanding of CIS benchmarks, OWASP, NIST, and secure configuration standards.
• Certifications such as Security+, CEH, Proofpoint Certified Administrator, or equivalent cybersecurity certifications.

• Administer and support Proofpoint email security platforms, including PPS, TAP, TRAP, URL Defense, Attachment Defense, and related email protection controls.
• Monitor email security health, investigate phishing or malicious email alerts, and support remediation of email-based threats.
• Configure and maintain email security policies such as spam filtering, impersonation protection, DLP, encryption, SPF, DKIM, and DMARC.
• Support Vulnerability Management activities including scan review, vulnerability validation, risk prioritization, remediation tracking, and SLA follow-up.
• Work with application, infrastructure, and security teams to coordinate patching and closure of vulnerabilities.
• Assist in Incident Response activities by analyzing alerts, gathering evidence, supporting containment, and documenting incident outcomes.
• Prepare regular reports, dashboards, and service health summaries for operational and leadership review.
• Support integration of security tools with SIEM, SOAR, Azure AD, M365, ITSM, or CMDB platforms where applicable.
• Provide secondary support for CrowdStrike Falcon endpoint security alerts, endpoint investigation, and coordination with endpoint or SOC teams.