Senior Cloud Email Security Analyst

Greenberg Traurig (GT), a global law firm with locations across the world in 15 countries, has an exciting employment opportunity for you. Join our Technology Team team as a Senior Cloud Email Security Analyst located in various offices.
Under the direction of the Enterprise Messaging Manager, the Senior Cloud Email Security Analyst supports and improves the organization’s cloud email security services. This role administers email security platforms, investigates email-based threats, maintains secure mail flow and authentication controls, and works with Technology, Information Security, Legal, and vendors to protect a large Microsoft 365 environment. The analyst works independently on complex issues, provides senior-level technical guidance, and helps improve operational procedures and security controls.
Administers, monitors, maintains, and tunes enterprise email security platforms, primarily Proofpoint and Microsoft 365 email security services.

~ Supports Exchange Online, Exchange Online Protection, Microsoft Defender for Office 365, and related mail-flow and threat-protection features.

~ Maintains and troubleshoots inbound, outbound, internal, application, partner, and secure-relay mail flow in cloud and hybrid environments.

~ Investigates phishing, business email compromise, spoofing, malware, malicious links or attachments, account compromise, and other email-related security events.

~ Performs message tracing, header and URL analysis, threat hunting, log review, evidence collection, containment, and post-delivery remediation.

~ Uses PowerShell and available APIs to automate routine administration, reporting, monitoring, and remediation activities.

~ Coordinates with Information Security, Identity, Compliance, Legal, Service Desk, application teams, and vendors on incidents, changes, and email security requirements.

~ Participates in disaster recovery, control testing, scheduled maintenance, and an on-call rotation for urgent incidents or service-impacting events.

~ Strong hands-on experience administering Proofpoint enterprise email security products and Microsoft 365 email security services.

~ Strong knowledge of Exchange Online, EOP, Microsoft Defender for Office 365, mail routing, connectors, transport rules, quarantine, and message tracing.

~ Experience investigating and responding to phishing, business email compromise, spoofing, account compromise, malware, and other email-based threats.

~ Proficiency with PowerShell and familiarity with Microsoft Graph, REST APIs, security analytics, and SIEM concepts.

~ Working knowledge of Microsoft Entra ID, role-based access, Conditional Access, and Microsoft Purview capabilities related to email.

~ Strong analytical, communication, collaboration, and customer-service skills, including the ability to explain technical risk to non-technical stakeholders.

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.

~ At least 6 years of progressive experience in enterprise messaging or cybersecurity, including 3 years of direct email security administration in a Microsoft 365 environment.

~ Production experience with Proofpoint, Exchange Online, EOP, and Microsoft Defender for Office 365.

~ Experience handling complex email security incidents, platform changes, policy updates, upgrades, or service improvements.

~ Current Microsoft security, identity, messaging, or security operations certification.

~ Security+, CISSP, CCSP, GIAC, or another relevant cybersecurity certification.

Exercise discretion when handling confidential, privileged, client, personnel, and security-sensitive information.

~ Work effectively in a remote or distributed team and be available for scheduled maintenance or urgent response outside normal business hours when required.

Requires manual dexterity to use a phone, enter data into a computer, handle objects, and use office equipment.