Description

Key Responsibilities 

Administer and support Proofpoint email security platforms, including PPS, TAP, TRAP, URL Defense, Attachment Defense, and related email protection controls.

Monitor email security health, investigate phishing or malicious email alerts, and support remediation of email-based threats.

Configure and maintain email security policies such as spam filtering, impersonation protection, DLP, encryption, SPF, DKIM, and DMARC.

Support Vulnerability Management activities including scan review, vulnerability validation, risk prioritization, remediation tracking, and SLA follow-up.

Work with application, infrastructure, and security teams to coordinate patching and closure of vulnerabilities.

Assist in Incident Response activities by analyzing alerts, gathering evidence, supporting containment, and documenting incident outcomes.

Prepare regular reports, dashboards, and service health summaries for operational and leadership review.

Support integration of security tools with SIEM, SOAR, Azure AD, M365, ITSM, or CMDB platforms where applicable.

Provide secondary support for CrowdStrike Falcon endpoint security alerts, endpoint investigation, and coordination with endpoint or SOC teams.

Required Experience 

5 to 8 years of experience in cybersecurity operations, email security, vulnerability management, or incident response.

Hands-on experience with Proofpoint solutions such as PPS, TAP, TRAP, DLP, URL Defense, and Attachment Defense.

Working knowledge of phishing analysis, email threat campaigns, malware indicators, and malicious payload investigation.

Experience with vulnerability scanning tools such as Qualys, Tenable, Rapid7, Wiz, or similar platforms.

Understanding of CVE, CVSS, remediation prioritization, patching workflows, and risk-based vulnerability management.

Basic understanding of incident response lifecycle, alert triage, evidence collection, escalation, and documentation.

Familiarity with Microsoft 365, Exchange Online, hybrid mail environments, SMTP, DNS, TLS, and mail-flow routing.

Exposure to CrowdStrike Falcon endpoint security is preferred.

Good to Have 

Knowledge of SIEM/SOAR workflows and SOC operations.

Exposure to CrowdStrike Falcon, Defender, or other EDR tools.

Understanding of CIS benchmarks, OWASP, NIST, and secure configuration standards.

Certifications such as Security+, CEH, Proofpoint Certified Administrator, or equivalent cybersecurity certifications.

Soft Skills 

Good communication and documentation skills.

Ability to work with multiple technical teams and stakeholders.

Strong analytical mindset and attention to detail.

Ability to work in a fast-paced global delivery environment.

Education 

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field

Key Skills

Education

Bachelor's degree