Senior Cloud Email Security Analyst

Greenberg Traurig•Tallahassee, FL

4d•Hybrid

About The Position

Greenberg Traurig is seeking a Senior Cloud Email Security Analyst to support and improve the organization’s cloud email security services. The role administers email security platforms, investigates email-based threats, maintains secure mail flow and authentication controls, and collaborates with Technology, Information Security, Legal, and vendors to protect a large Microsoft 365 environment. The analyst works independently on complex issues, provides senior-level technical guidance, and helps improve operational procedures and security controls. The position can be based in various offices on a hybrid basis and reports to the Director of Enterprise Messaging. It is part of the Technology Team and includes participation in disaster recovery, control testing, scheduled maintenance, and an on-call rotation for urgent incidents or service-impacting events. The role may require availability for scheduled maintenance or urgent response outside normal business hours when required.

Requirements

Strong hands-on experience administering Proofpoint enterprise email security products and Microsoft 365 email security services.
Strong knowledge of Exchange Online, EOP, Microsoft Defender for Office 365, mail routing, connectors, transport rules, quarantine, and message tracing.
Strong understanding of SMTP, MIME, DNS, email headers, TLS, certificates, SPF, DKIM, DMARC, and common third-party sending services.
Experience investigating and responding to phishing, business email compromise, spoofing, account compromise, malware, and other email-based threats.
Proficiency with PowerShell and familiarity with Microsoft Graph, REST APIs, security analytics, and SIEM concepts.
Working knowledge of Microsoft Entra ID, role-based access, Conditional Access, and Microsoft Purview capabilities related to email.
Ability to manage multiple priorities, follow change and incident-management processes, and produce clear technical documentation.
Strong analytical, communication, collaboration, and customer-service skills, including the ability to explain technical risk to non-technical stakeholders.
Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.
At least 6 years of progressive experience in enterprise messaging or cybersecurity, including 3 years of direct email security administration in a Microsoft 365 environment.
Production experience with Proofpoint, Exchange Online, EOP, and Microsoft Defender for Office 365.
Experience handling complex email security incidents, platform changes, policy updates, upgrades, or service improvements.
Availability for scheduled maintenance or urgent response outside normal business hours when required.

Nice To Haves

Experience in a large, distributed, highly available, or regulated environment.
Current Proofpoint email security certification.
Current Microsoft security, identity, messaging, or security operations certification.
Security+, CISSP, CCSP, GIAC, or another relevant cybersecurity certification.

Responsibilities

Administer, monitor, maintain, and tune enterprise email security platforms, primarily Proofpoint and Microsoft 365 email security services.
Support Exchange Online, Exchange Online Protection, Microsoft Defender for Office 365, and related mail-flow and threat-protection features.
Maintain and troubleshoot inbound, outbound, internal, application, partner, and secure-relay mail flow in cloud and hybrid environments.
Manage email authentication and domain-protection controls, including SPF, DKIM, DMARC, TLS, DNS records, certificates, and third-party sender onboarding.
Investigate phishing, business email compromise, spoofing, malware, malicious links or attachments, account compromise, and other email-related security events.
Perform message tracing, header and URL analysis, threat hunting, log review, evidence collection, containment, and post-delivery remediation.
Use PowerShell and available APIs to automate routine administration, reporting, monitoring, and remediation activities.
Coordinate with Information Security, Identity, Compliance, Legal, Service Desk, application teams, and vendors on incidents, changes, and email security requirements.
Create and maintain technical documentation, procedures, change records, test plans, service reports, and operational metrics.
Provide senior escalation support, share knowledge with other support teams, and assist with vendor evaluations, upgrades, and security improvements.
Participate in disaster recovery, control testing, scheduled maintenance, and an on-call rotation for urgent incidents or service-impacting events.
Perform other duties as assigned or required.
Maintain current knowledge of email security threats, product changes, vulnerabilities, and industry practices.
Exercise discretion when handling confidential, privileged, client, personnel, and security-sensitive information.