Senior Email Security Engineer - 3 Month

Overview

Key Responsibilities

• Own enterprise email security gateways in production environments
• Design, tune, and operate:
• Anti‑phishing, anti‑spoofing, and malware controls
• Secure mail routing, TLS enforcement, and quarantine workflows
• Lead incident response for email‑borne threats (BEC, malware, zero‑day phishing)
• Integrate email security with M365 Defender / SIEM / SOAR / DLP
• Produce audit‑ready evidence aligned to SAMA / NCA frameworks
• Mentor L1/L2 analysts and document operational runbooks
• Design, deploy, and maintain email security solutions including anti-phishing, anti-spam, email encryption, and data loss prevention technologies
• Monitor and analyze email security incidents, respond to threats, and conduct investigations to mitigate risk
• Implement and manage email security protocols such as SPF, DKIM, DMARC to enhance email authentication and trustworthiness
• Collaborate with other IT and security teams to integrate email security with overall cybersecurity strategy
• Develop and enforce email security policies, procedures, and best practices
• Conduct regular security assessments and vulnerability testing on email systems
• Stay current on emerging email threats and advanced attack techniques to proactively recommend improvements
• Provide training and awareness sessions regarding email security to employees and stakeholders

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
• FireEye EX / Trellix Email SecurityCisco Secure Email Gateway (ESA / IronPort)Trend Micro ScanMailProofpoint or Mimecast
• Microsoft Defender for Office 365 & EOP
• Exchange Online mail flow & hybrid email routing
• DMARC, DKIM, SPF enforcement & troubleshooting
• Email threat hunting & forensic analysis5+ years of experience in email security or related cybersecurity roles
• Strong knowledge of email security technologies such as Microsoft Defender for Office 365, Proofpoint, Mimecast, or similar platforms
• Proficiency in implementing and managing SPF, DKIM, and DMARC protocols
• Experience with email encryption standards and data loss prevention (DLP) solutions
• Demonstrated ability to analyze and respond to email-based threats such as phishing and malware
• Familiarity with incident response procedures and security information and event management (SIEM) tools
• Excellent problem-solving skills with strong attention to detail
• Strong communication skills to educate and collaborate with technical and non-technical teams

Preferred Qualifications

• Relevant certifications such as Certified Email Security Specialist (CESS), CISSP, or CISM
• Experience with scripting and automation for email security processes
• Knowledge of compliance standards related to email security and data privacy (e.g., GDPR, HIPAA)
• Experience in a managed security service provider (MSSP) environment is a plus
• Strong advantage
• + Experience in regulated Saudi environments
• + Evidence‑driven operations (audits, compliance, KPIs)
• + Incident leadership during phishing or BEC events

Us