firstPRO is now accepting resumes for a Email Data Security Engineer role in Waltham, MA. This is a direct hire and onsite 3 days per week.
We’re looking for an email and data security engineer to join our ranks. Are you an experienced security engineer with strong knowledge and technical expertise? As an email and data security engineer, you will be a key member of the Information Security Engineering team. You will use your strong understanding of email systems, data and communication security solutions, and design processes to enable and deliver resilient email and data security services. You will work collaboratively with the Information Security teams to ensure that solutions and services are designed and adopted effectively.
Key Responsibilities
- Email Security Technology Design: Designing and implementing secure email architectures, including the selection and configuration of email gateways, filtering systems, and encryption technologies
- Anti-Phishing Measures: Implementing anti-phishing solutions to detect and prevent phishing attacks
- Spam and Malware Protection: Configuring and managing spam filters and antivirus solutions
- Encryption and Data Loss Prevention (DLP): Deploying encryption mechanisms to protect sensitive information within emails and implementing DLP solutions to prevent unauthorized disclosure of CFN confidential data
- Authentication Protocols: Configuring and enforcing email authentication protocols such as SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC (Domain-based Message Authentication, Reporting, and Conformance)
- Incident Response: Developing and implementing incident response plans to quickly identify and mitigate email security incidents, including the investigation of security breaches and the recovery of compromised accounts. Includes integration with CFN SIEM/SOAR platforms
- Security Awareness Training: Providing training and awareness programs for users to recognize and respond to email-based threats, promoting a security-conscious culture within the organization
- Policy Development and Compliance: Developing and enforcing email security policies to ensure compliance with industry regulations and standards, as well as internal security requirements
- Continuous Monitoring and Analysis: Implementing tools and processes for continuous monitoring of email traffic, analyzing logs, and staying informed about emerging threats to proactively adapt security measures
- Collaboration with IT and InfoSec Teams: Working closely with IT teams, email administrators, and the InfoSec team to integrate email security measures with overall organizational security strategies