Cyber Security Engineer

About the role

You will play a key role in improving the organisation’s email security posture by managing and optimising its email security platform. The focus is on gateway protection, DMARC and email‑fraud defence, threat response, and human‑risk reduction initiatives to strengthen resilience against phishing, spoofing and account compromise.

Key responsibilities

• Configure, maintain and uplift email security controls, including gateway policy health, safelist and custom spam‑rule reviews, domain validation and documentation.
• Drive improvements in DMARC, email fraud defence and spoofing protection, covering SPF/DKIM alignment, inbound enforcement and bypass handling.
• Tune controls for phishing, impersonation, QR‑code threats, malicious URLs, supplier‑originated threats and account‑takeover signals.
• Leverage email security analytics to support targeted user interventions and measurable risk reduction.
• Collaborate with Cyber Security, Infrastructure, End‑User Computing and vendor teams to enhance email security operations.
• Identify opportunities to improve security controls, processes and threat detection capabilities.

Required profile

• Hands‑on experience with Proofpoint Email Protection or a comparable secure email gateway.
• Strong understanding of SPF, DKIM, DMARC, email routing and inbound enforcement.
• Experience conducting phishing investigations, threat triage and email security operations.
• Ability to automate or streamline email security processes using APIs, scripting, or SIEM/SOAR integrations.
• Proven ability to work effectively across technical teams and external vendors.
• Strong analytical and problem‑solving skills with a security‑first mindset.

Required skills

• Proofpoint Email Protection (or equivalent secure email gateway)
• SPF, DKIM, DMARC
• Email routing and inbound enforcement
• Phishing investigation and threat triage
• API integration
• Scripting (e.g., Python, PowerShell)
• SIEM and SOAR platforms