Senior Engineer (Email Security)

The Senior Engineer for Email Security is the technical owner of the mail protection stack. The role designs detection and filtering policy, tunes it against live attack traffic, and builds the automation that removes malicious mail from mailboxes quickly. It also carries the deep troubleshooting work on mail flow and authentication that other teams escalate.

Responsibilities

• Configure and tune anti-phishing, anti-malware, sandboxing, URL rewriting, and impersonation protection policies, and measure the effect of each change on catch and false positive rates.
• Manage SPF, DKIM, and DMARC records for all sending domains, onboard third-party senders correctly, and advance domains toward an enforcing policy.
• Investigate escalated phishing and business email compromise cases, extract indicators, and implement blocks and post-delivery removal across the estate.
• Automate message tracing, quarantine review, indicator blocking, and reporting through platform APIs and orchestration tooling.
• Troubleshoot complex mail flow, routing, and encryption issues with the messaging team, and mentor engineers on email security practice

Skills and Experience

• English Level B2+
• Five or more years in messaging or security engineering, with at least three years focused on email security.
• Hands-on expertise with a secure email gateway or cloud email protection platform, including policy design, quarantine operations, and message tracing.
• Working command of SMTP, DNS, TLS, and email authentication standards, and of Exchange Online administration.
• Scripting ability in PowerShell or Python, and experience automating email security operations through APIs.

• Certification such as Microsoft SC-200, MS-203, GCIA, or a vendor email security credential.
• Experience integrating email telemetry with a SIEM and building automated phishing response playbooks.