Network Security Engineer (Email Security)

Network Security Engineer needed for a 1+ year contract position working onsite in New York, NY!

Job Summary:

We are seeking a Senior Network Security Engineer with a specialized focus on email security to join our cybersecurity team. The ideal candidate will be responsible for reviewing, enhancing, and maintaining the security posture of our organization's email infrastructure. This includes email configuration reviews, email threat analysis, and working with our security operations team on email related incident response efforts related to phishing, spoofing, malware delivery, and business email compromise (BEC) attempts.

Key Responsibilities:

Email Configuration Review:

• Review and optimize configurations for email security platforms for Cisco Ironport, Cofense, Abnormal Security and Microsoft technologies.
• Audit SPF, DKIM, and DMARC records and ensure proper alignment and enforcement.
• Maintain and improve Cisco Ironport secure email gateway (SEG) and cloud email security configurations.
• Review and adjust policies for anti-spam, anti-malware, and phishing detection.

Email Threat Monitoring & Response:

• Perform daily threat review of email logs, quarantine reports, and alerts from email security platforms for Cisco Ironport, Cofense, Abnormal Security and Microsoft technologies.
• Investigate and work with our security operations team on email-based incidents such as email bombing, phishing, spoofing, and malware.
• Develop and maintain playbooks for email threat detection and response.

Security Operations & Engineering:

• Collaborate with CHD Cybersecurity and Infrastructure teams, third-party SOC and incident response teams during email security incidents.
• Lead email-related threat hunting and retrospective analysis using logs and forensic tools.
• Tune email security platform alert thresholds, detection logic, and anomaly detections.

User Awareness & Support:

• Provide technical guidance to support teams and end-users on secure email practices.
• Assist in developing and reviewing phishing simulation campaigns.
• Support security awareness training efforts related to email threats.

Required Qualifications:

• 10+ years of experience in network or cybersecurity roles, with at least 5+ years focused on email security.
• Deep understanding of email protocols (SMTP, IMAP, POP3) and authentication mechanisms (SPF, DKIM, DMARC).
• Experience with enterprise-grade email security platforms (e.g., Cisco Ironport, Cofense, Abnormal Security) and Microsoft technologies.
• Strong knowledge of email-based threats and techniques used by attackers.
• Experience responding to and investigating phishing and business email compromise (BEC) events.