Senior Email Security Engineer - 3 Month

Overview

Key Responsibilities

• Own **enterprise email security gateways** in production environments
• Design, tune, and operate:
• Anti‑phishing, anti‑spoofing, and malware controls
• Secure mail routing, TLS enforcement, and quarantine workflows
• Lead incident response for email‑borne threats (BEC, malware, zero‑day phishing)
• Integrate email security with **M365 Defender / SIEM / SOAR / DLP**
• Produce **audit‑ready evidence** aligned to SAMA / NCA frameworks
• Mentor L1/L2 analysts and document operational runbooks
• Design, deploy, and maintain email security solutions including anti-phishing, anti-spam, email encryption, and data loss prevention technologies.
• Monitor and analyze email security incidents, respond to threats, and conduct investigations to mitigate risk.
• Implement and manage email security protocols such as SPF, DKIM, DMARC to enhance email authentication and trustworthiness.
• Collaborate with other IT and security teams to integrate email security with overall cybersecurity strategy.
• Develop and enforce email security policies, procedures, and best practices.
• Conduct regular security assessments and vulnerability testing on email systems.
• Stay current on emerging email threats and advanced attack techniques to proactively recommend improvements.
• Provide training and awareness sessions regarding email security to employees and stakeholders.
• **Requirements** **Requirements:**
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• FireEye EX / Trellix Email SecurityCisco Secure Email Gateway (ESA / IronPort)Trend Micro ScanMailProofpoint or Mimecast
• Microsoft Defender for Office 365 & EOP
• Exchange Online mail flow & hybrid email routing
• DMARC, DKIM, SPF enforcement & troubleshooting
• Email threat hunting & forensic analysis5+ years of experience in email security or related cybersecurity roles.
• Strong knowledge of email security technologies such as Microsoft Defender for Office 365, Proofpoint, Mimecast, or similar platforms.
• Proficiency in implementing and managing SPF, DKIM, and DMARC protocols.
• Experience with email encryption standards and data loss prevention (DLP) solutions.
• Demonstrated ability to analyze and respond to email-based threats such as phishing and malware.
• Familiarity with incident response procedures and security information and event management (SIEM) tools.
• Excellent problem-solving skills with strong attention to detail.
• Strong communication skills to educate and collaborate with technical and non-technical teams.

Preferred Qualifications

• Relevant certifications such as Certified Email Security Specialist (CESS), CISSP, or CISM.
• Experience with scripting and automation for email security processes.
• Knowledge of compliance standards related to email security and data privacy (e.g., GDPR, HIPAA).
• Experience in a managed security service provider (MSSP) environment is a plus.
• **Strong advantage**
• + Experience in **regulated Saudi environments**
• + Evidence‑driven operations (audits, compliance, KPIs)
• + Incident leadership during phishing or BEC events

Why Join Us