Senior Cloud Email Security Analyst

Greenberg Traurig•Austin, TX

2d•Hybrid

About The Position

Greenberg Traurig (GT) is hiring a Senior Cloud Email Security Analyst for its Technology Team. The role can be based in various offices on a hybrid basis and reports to the Director of Enterprise Messaging. Under the direction of the Enterprise Messaging Manager, the analyst supports and improves the organization’s cloud email security services, administers email security platforms, investigates email-based threats, and maintains secure mail flow and authentication controls across a large Microsoft 365 environment. The analyst works independently on complex issues, provides senior-level technical guidance, and helps improve operational procedures and security controls. The role collaborates with Technology, Information Security, Legal, and vendors to protect the organization’s email environment. The analyst also handles complex incidents and platform changes, contributes to documentation and service improvements, and participates in disaster recovery, control testing, scheduled maintenance, and an on-call rotation. The position requires discretion when handling confidential, privileged, client, personnel, and security-sensitive information, and availability for scheduled maintenance or urgent response outside normal business hours when required. The position may involve moving around the work area to meet with colleagues or a supervisor and retrieve assignments. It may also be sedentary, requiring extended periods of sitting, and requires manual dexterity to use a phone, enter data into a computer, handle objects, and use office equipment.

Requirements

At least 6 years of progressive experience in enterprise messaging or cybersecurity, including 3 years of direct email security administration in a Microsoft 365 environment.
Strong hands-on experience administering Proofpoint enterprise email security products and Microsoft 365 email security services.
Strong knowledge of Exchange Online, EOP, Microsoft Defender for Office 365, mail routing, connectors, transport rules, quarantine, and message tracing.
Strong understanding of SMTP, MIME, DNS, email headers, TLS, certificates, SPF, DKIM, DMARC, and common third-party sending services.
Experience investigating and responding to phishing, business email compromise, spoofing, account compromise, malware, and other email-based threats.
Proficiency with PowerShell and familiarity with Microsoft Graph, REST APIs, security analytics, and SIEM concepts.
Working knowledge of Microsoft Entra ID, role-based access, Conditional Access, and Microsoft Purview capabilities related to email.
Production experience with Proofpoint, Exchange Online, EOP, and Microsoft Defender for Office 365.
Experience handling complex email security incidents, platform changes, policy updates, upgrades, or service improvements.
Ability to manage multiple priorities, follow change and incident-management processes, and produce clear technical documentation.
Strong analytical, communication, collaboration, and customer-service skills, including the ability to explain technical risk to non-technical stakeholders.
Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.
Exercise discretion when handling confidential, privileged, client, personnel, and security-sensitive information.
Work effectively in a remote or distributed team and be available for scheduled maintenance or urgent response outside normal business hours when required.

Nice To Haves

Experience in a large, distributed, highly available, or regulated environment.
Current Proofpoint email security certification.
Current Microsoft security, identity, messaging, or security operations certification.
Security+, CISSP, CCSP, GIAC, or another relevant cybersecurity certification.

Responsibilities

Administer, monitor, maintain, and tune enterprise email security platforms, primarily Proofpoint and Microsoft 365 email security services.
Support Exchange Online, Exchange Online Protection, Microsoft Defender for Office 365, and related mail-flow and threat-protection features.
Maintain and troubleshoot inbound, outbound, internal, application, partner, and secure-relay mail flow in cloud and hybrid environments.
Manage email authentication and domain-protection controls, including SPF, DKIM, DMARC, TLS, DNS records, certificates, and third-party sender onboarding.
Investigate phishing, business email compromise, spoofing, malware, malicious links or attachments, account compromise, and other email-related security events.
Perform message tracing, header and URL analysis, threat hunting, log review, evidence collection, containment, and post-delivery remediation.
Use PowerShell and available APIs to automate routine administration, reporting, monitoring, and remediation activities.
Coordinate with Information Security, Identity, Compliance, Legal, Service Desk, application teams, and vendors on incidents, changes, and email security requirements.
Create and maintain technical documentation, procedures, change records, test plans, service reports, and operational metrics.
Provide senior escalation support, share knowledge with other support teams, and assist with vendor evaluations, upgrades, and security improvements.
Participate in disaster recovery, control testing, scheduled maintenance, and an on-call rotation for urgent incidents or service-impacting events.
Maintain current knowledge of email security threats, product changes, vulnerabilities, and industry practices.
Perform other duties as assigned or required.