Mail Flow Security Engineer Jobs

1 job found

1d ago

Security Engineer - Email Security

Zelis Morristown, NJ

Morristown, NJ

1d ago

$135k - $186k/yr Full time Data Security Email Security Enterprise Email Security

Apply Now

Job Description

Zelis is seeking a Security Engineer to strengthen the security, reliability, and protection of its enterprise email environment. In this hybrid role based in Morristown, NJ, you will help detect and prevent email-based threats, administer email security controls in Microsoft 365, and support investigations across the mail flow lifecycle.

Role Focus

Support and enhance email security for the enterprise email environment
Identify and prevent phishing, BEC, spoofing, spam, malware, and other email-borne threats
Administer and troubleshoot Microsoft 365 and Exchange Online security controls and mail flow

Responsibilities

Analyze suspicious messages, including email headers, message routing, URLs, attachments, sender reputation, authentication results, and other indicators of compromise
Administer and support email security controls in Exchange Online, Defender for O365, EasyDMARC, and Abnormal Security environments
Troubleshoot email delivery and mail-flow issues, including quarantine, filtering, and security-policy problems
Review Exchange message traces and mail-flow logs to determine message disposition and identify security or delivery issues
Configure and maintain mail-flow rules, anti-spam and anti-phishing protections, allow/block lists, quarantine policies, and related email security controls
Support incident containment and remediation, including message removal, sender/domain blocking, URL blocking, mailbox remediation, and escalation for compromised accounts
Assist with administration and tuning of Microsoft Defender for Office 365 or comparable secure email gateway/email security technologies
Analyze and troubleshoot email authentication technologies including SPF, DKIM, and DMARC
Identify false positives and false negatives, and recommend improvements to policies and detection rules
Document investigations, findings, remediation actions, and recurring email security issues
Create and maintain operational procedures, troubleshooting guides, and knowledge-base documentation
Collaborate with SOC, Incident Response, Identity and Access Management, Infrastructure, and Messaging teams during security investigations
Support email security metrics, reporting, trend analysis, and continuous improvement initiatives
Stay current on emerging phishing techniques, business email compromise tactics, attacker infrastructure, and email security best practices

Requirements

5+ years proven experience designing and implementing enterprise-grade email security guardrails in regulated fintech or healthcare environments with a security-first mindset, including phishing and BEC prevention, email authentication, data loss prevention, policy enforcement, monitoring, and incident response
3+ years hands-on experience with Microsoft Exchange, Exchange Online, or Microsoft 365 messaging environments
Working knowledge of Microsoft Exchange mail flow, connectors, transport/mail-flow rules, and message tracking/message tracing
Experience investigating phishing, spam, malware, spoofing, and business email compromise incidents
Strong understanding of email protocols and technologies including SMTP, DNS, SPF, DKIM, and DMARC
Experience analyzing email headers to determine message origin, routing, authentication results, and potential malicious indicators
Familiarity with Microsoft Defender for Office 365, Exchange Online Protection (EOP), or similar enterprise email security platforms
Understanding of attacker techniques such as credential phishing, malicious attachments, malicious URLs, impersonation, and account compromise
Strong analytical, troubleshooting, documentation, and communication skills
Ability to independently investigate moderately complex incidents and escalate high-risk or advanced threats appropriately

Technologies

Microsoft 365, Microsoft Exchange, Exchange Online
Exchange Online Protection (EOP), Defender for O365, Microsoft Defender for Office 365
EasyDMARC, Abnormal Security
SPF, DKIM, DMARC, SMTP, DNS
PowerShell, PowerShell for Exchange Online administration, investigation, or automation
Microsoft Purview, Microsoft Sentinel, Microsoft Defender for Endpoint
Proofpoint, Mimecast, Cisco Secure Email
PowerShell / Security Automation

Benefits

401k plan with employer match
Flexible paid time off
Holidays
Parental leaves
Life and disability insurance
Health benefits including medical, dental, vision, and prescription drug coverage

Preferred Qualifications

Experience with Microsoft Defender for Office 365, including Safe Links, Safe Attachments, Threat Explorer, and automated investigation and response
Experience using Microsoft Purview, Microsoft Sentinel, or the Microsoft Defender security ecosystem
Experience with PowerShell for Exchange Online administration, investigation, or automation
Familiarity with other Microsoft tools; support administration, monitoring, and policy tuning of EDR/XDR platforms such as Defender for Endpoint and Purview
Experience investigating compromised Microsoft 365 accounts and malicious inbox or forwarding rules
Knowledge of email security gateways or platforms such as Proofpoint, Mimecast, Cisco Secure Email, Abnormal Security, or similar technologies
Familiarity with threat intelligence concepts, indicators of compromise (IOCs), and attacker TTPs
Knowledge of AI/ML security concepts including data leakage, model abuse, identity and access controls, secure integrations, and protection of sensitive data within AI-enabled systems

Location and Work Flexibility

Hybrid role based in Morristown, NJ
Zelis is headquartered in the U.S., with multiple locations across the country and in Hyderabad, India
All employee work locations are based on the needs of the position and are determined by Leadership
In-office work and activities vary based on work and team objectives in accordance with Company policies
Candidates within approximately 50 miles of a U.S. office are generally preferred to support collaboration when needed
Hybrid approach is flexible, with in-office presence guided by team and business needs rather than a fixed weekly schedule

Compensation

Base salary range: USD 135,200 - 185,900 per year

Accessibility Support

Email TalentAcquisition@zelis.com for reasonable accommodation with any part of the application and/or interview process.

View full job page →

Get Mail Flow Security Engineer Jobs alerts

New Mail Flow Security Engineer Jobs, daily.