L3 Email Security Lead

Job highlights

• Expert in email security controls including sandboxing, DMARC, threat intelligence integration, and Mimecast implementation
• Manage and improve email security systems, handle incident response, configure DKIM/DMARC/SPF, lead phishing simulations, and integrate events into SIEM

Job Summary

We have Immediate openings for MNC Company as L3 Email Security Lead in Mumbai Location.

Job Description

Cyber security team is looking for responsible for architecting and managing the secure email ecosystem, protecting against phishing, spoofing, and malicious payloads. The position demands expert-level command over advanced email security controls such as sandboxing, DMARC, threat intelligence integration, and user awareness. The individual is expected to drive continuous improvements, incident response handling, and regulatory email security hygiene.

Key Responsibilities

• Manage and continuously improve Mimecast Email Security implementation to prevent phishing, spoofing, and malware threats targeting users.
• Establish advanced filtering, impersonation protection, and attachment sandboxing policies per risk-based user segmentation.
• Ensure email routing, journaling, and DKIM/DMARC/SPF configurations are aligned with compliance and audit requirements.
• Monitor and resolve advanced email threats, perform RCA on false negatives/positives, and lead remediation for targeted phishing attacks.
• Integrate email security events into SIEM for correlation with identity and endpoint telemetry for improved incident detection.
• Develop reporting templates for weekly threat trends and support governance teams with compliance submissions.
• Provide guidance on BEC protection, email content control, and mailbox behavior analytics.
• Lead simulation testing, phishing campaign exercises, and user awareness metrics for ongoing posture improvements.
• Collaborate with IT and IR teams to drive end-to-end containment and recovery of email-borne incidents.
• Define operational baselines, tune policies, and manage escalations from SOC analysts and internal stakeholders.