Senior Engineer (Email Security)

About the role

The Senior Engineer for Email Security is the technical owner of the mail protection stack, designing detection and filtering policies, tuning them against live attack traffic, and building automation to quickly remove malicious mail from mailboxes.

Key responsibilities

• Configure and tune anti‑phishing, anti‑malware, sandboxing, URL rewriting, and impersonation protection policies, measuring catch and false‑positive rates.
• Manage SPF, DKIM, and DMARC records, onboard third‑party senders, and move domains toward enforcing policies.
• Investigate escalated phishing and business email compromise cases, extract indicators, and implement blocks and post‑delivery removal.
• Automate message tracing, quarantine review, indicator blocking, and reporting via platform APIs and orchestration tools.
• Troubleshoot complex mail flow, routing, and encryption issues with the messaging team and mentor engineers on email security practices.

Required profile

• English level B2+.
• Five or more years in messaging or security engineering, with at least three years focused on email security.
• Hands‑on expertise with a secure email gateway or cloud email protection platform, including policy design, quarantine operations, and message tracing.
• Working command of SMTP, DNS, TLS, and email authentication standards, and Exchange Online administration.
• Scripting ability in PowerShell or Python and experience automating email security operations through APIs.

Required skills

• Anti‑phishing, anti‑malware, sandboxing, URL rewriting, impersonation protection.
• SPF, DKIM, DMARC management.
• PowerShell, Python scripting.
• API integration and automation.
• SMTP, DNS, TLS protocols.
• Exchange Online administration.
• Secure email gateway or cloud email protection platform.