Proofpoint Security EngineerAnalyst

Key Responsibilities:
Proofpoint Email Security Operations
Administer and manage Proofpoint Email Protection (PEP) platform
Monitor and analyze email threats (phishing malware spam BEC attacks)
Configure and fine-tune email filtering policies anti-spam and anti-malware rules
Investigate and respond to email security incidents and alerts
Threat Protection & Monitoring
Work with Proofpoint TAP (Targeted Attack Protection) for advanced threat detection
Analyze URL defense attachment sandboxing and threat intelligence feeds
Perform incident triage root cause analysis and remediation actions
Track emerging threats and update detection mechanisms accordingly
Data Loss Prevention (DLP)
Implement and manage Proofpoint DLP policies (email-based data protection)
Define policies for sensitive data (PII PCI financial data)
Monitor and respond to data leakage incidents via email channels
Collaborate with business teams to classify and protect critical data
Email Security Governance & Compliance
Ensure adherence to organizational security policies and regulatory standards
Support audit requirements with reports logs and policy evidence
Maintain documentation of email security controls and processes
Platform Configuration & Optimization
Configure email routing encryption (Proofpoint Encryption) and secure relay
Perform policy tuning to reduce false positives/negatives
Manage user awareness features (phishing simulation training integrations)
Integration & Automation
Integrate Proofpoint with SIEM/SOAR tools (Splunk Sentinel etc.)
Automate alert handling and response workflows
Collaborate with broader SOC and IAM teams
Stakeholder Management
Work closely with IT Security and Business stakeholders
Provide SME guidance on email security posture and improvements
Support onboarding of new domains/users into Proofpoint
Required Skills:
Hands-on experience with Proofpoint Email Protection (PEP)
Exposure to Proofpoint TAP TRAP (Threat Response Auto-Pull) and DLP
Strong understanding of email security concepts (SMTP SPF DKIM DMARC)
Experience in incident response and threat analysis (phishing BEC)
Knowledge of data protection and DLP policy frameworks
Familiarity with SIEM tools (Splunk Sentinel QRadar)
Basic scripting (PowerShell/Python) is a plus
Preferred Skills:
Experience in SOC L2/L3 operations
Certifications in Proofpoint / Cyber Security (CEH CISSP Security)
Experience in Banking/Financial services domain
Exposure to cloud email platforms (Microsoft 365 Exchange Online)
Soft Skills:
Strong analytical and investigation skills
Effective communication and reporting
Ability to work in 24x7 SOC / 12x5 model
Proactive approach to threat mitigation
Key Deliverables:
Improved protection against phishing and email-based attacks
Effective DLP enforcement with reduced data leakage incidents
Reduced false positives and optimized policy efficiency
Timely incident response and reporting