Senior Cloud Email Security Analyst

Greenberg Traurig, LLP

. Administer, monitor, maintain, and tune enterprise email security platforms, primarily Proofpoint and Microsoft 365 email security services .

Posted 10/22/2026full-timeUnited StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in administering and securing enterprise email systems, particularly with Proofpoint and Microsoft 365, while effectively managing email authentication and threat response. Possesses strong analytical and communication skills to address complex security incidents and collaborate with cross-functional teams.

Highest-signal resume keywords

Proofpoint AdministrationMicrosoft 365 Email SecurityEmail Threat InvestigationPowerShell ProficiencyEmail Security Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Exchange OnlineExchange Online ProtectionMicrosoft Defender for Office 365SMTPMIMEDNSSPFDKIMDMARCThreat Hunting

Soft Skills

Analytical SkillsCommunication SkillsCollaboration SkillsCustomer Service SkillsTechnical Documentation

Tools & Technologies

PowerShellMicrosoft GraphREST APIsSIEMMicrosoft Entra ID

Certifications & Qualifications

Proofpoint Email Security CertificationMicrosoft Security CertificationSecurity+CISSPCCSPGIAC

Industry Keywords

Email SecurityCybersecurityIncident ManagementChange ManagementRegulated Environment

Tech Stack

Tools & technologies

CloudCyber SecurityDNSSMTP

About the role

Key responsibilities & impact

Administer, monitor, maintain, and tune enterprise email security platforms, primarily Proofpoint and Microsoft 365 email security services
Support Exchange Online, Exchange Online Protection, Microsoft Defender for Office 365, and related mail-flow and threat-protection features
Maintain and troubleshoot inbound, outbound, internal, application, partner, and secure-relay mail flow in cloud and hybrid environments
Manage email authentication and domain-protection controls, including SPF, DKIM, DMARC, TLS, DNS records, certificates, and third-party sender onboarding
Investigate phishing, business email compromise, spoofing, malware, malicious links or attachments, account compromise, and other email-related security events
Perform message tracing, header and URL analysis, threat hunting, log review, evidence collection, containment, and post-delivery remediation
Use PowerShell and available APIs to automate routine administration, reporting, monitoring, and remediation activities
Coordinate with Information Security, Identity, Compliance, Legal, Service Desk, application teams, and vendors on incidents, changes, and email security requirements
Create and maintain technical documentation, procedures, change records, test plans, service reports, and operational metrics
Provide senior escalation support, share knowledge with other support teams, and assist with vendor evaluations, upgrades, and security improvements
Participate in disaster recovery, control testing, scheduled maintenance, and an on-call rotation for urgent incidents or service-impacting events
Perform other duties as assigned or required
Report to the Director of Enterprise Messaging under the direction of the Enterprise Messaging Manager

Requirements

What you’ll need

Strong hands-on experience administering Proofpoint enterprise email security products and Microsoft 365 email security services
Strong knowledge of Exchange Online, Exchange Online Protection, Microsoft Defender for Office 365, mail routing, connectors, transport rules, quarantine, and message tracing
Strong understanding of SMTP, MIME, DNS, email headers, TLS, certificates, SPF, DKIM, DMARC, and common third-party sending services
Experience investigating and responding to phishing, business email compromise, spoofing, account compromise, malware, and other email-based threats
Proficiency with PowerShell and familiarity with Microsoft Graph, REST APIs, security analytics, and SIEM concepts
Working knowledge of Microsoft Entra ID, role-based access, Conditional Access, and Microsoft Purview capabilities related to email
Ability to manage multiple priorities, follow change and incident-management processes, and produce clear technical documentation
Strong analytical, communication, collaboration, and customer-service skills, including the ability to explain technical risk to non-technical stakeholders
Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience
At least 6 years of progressive experience in enterprise messaging or cybersecurity, including 3 years of direct email security administration in a Microsoft 365 environment
Production experience with Proofpoint, Exchange Online, EOP, and Microsoft Defender for Office 365
Experience handling complex email security incidents, platform changes, policy updates, upgrades, or service improvements
Experience in a large, distributed, highly available, or regulated environment is preferred
Current Proofpoint email security certification is preferred
Current Microsoft security, identity, messaging, or security operations certification is preferred
Security+, CISSP, CCSP, GIAC, or another relevant cybersecurity certification is preferred
Maintain current knowledge of email security threats, product changes, vulnerabilities, and industry practices
Exercise discretion when handling confidential, privileged, client, personnel, and security-sensitive information
Work effectively in a remote or distributed team and be available for scheduled maintenance or urgent response outside normal business hours when required

Benefits

Comp & perks

Competitive compensation
Excellent benefits package
Innovative and collaborative work environment
Hybrid work arrangement
Opportunity to work within a global law firm
Scheduled maintenance and urgent response opportunities outside normal business hours when required