Senior Engineer (Email Security)
Auxis Bogota, Capital District, RAP (Especial) Central, Colombia
Outsourcing/Offshoring · 1,001-5,000 employees
About the role
The Senior Engineer will manage the mail protection stack, including designing filtering policies and automating the removal of malicious content. They are also responsible for troubleshooting complex mail flow issues and mentoring team members on email security practices.
What they look for
Requirements
Candidates must have at least five years of experience in messaging or security engineering, with a specific focus on email security. Proficiency in SMTP, DNS, email authentication standards, and scripting languages like PowerShell or Python is required.
Full description
Job Summary
The Senior Engineer for Email Security is the technical owner of the mail protection stack. The role designs detection and filtering policy, tunes it against live attack traffic, and builds the automation that removes malicious mail from mailboxes quickly. It also carries the deep troubleshooting work on mail flow and authentication that other teams escalate.
Responsibilities
- Configure and tune anti-phishing, anti-malware, sandboxing, URL rewriting, and impersonation protection policies, and measure the effect of each change on catch and false positive rates.
- Manage SPF, DKIM, and DMARC records for all sending domains, onboard third-party senders correctly, and advance domains toward an enforcing policy.
- Investigate escalated phishing and business email compromise cases, extract indicators, and implement blocks and post-delivery removal across the estate.
- Automate message tracing, quarantine review, indicator blocking, and reporting through platform APIs and orchestration tooling.
- Troubleshoot complex mail flow, routing, and encryption issues with the messaging team, and mentor engineers on email security practice
Skills and Experience
Required Qualifications
- English Level B2+
- Five or more years in messaging or security engineering, with at least three years focused on email security.
- Hands-on expertise with a secure email gateway or cloud email protection platform, including policy design, quarantine operations, and message tracing.
- Working command of SMTP, DNS, TLS, and email authentication standards, and of Exchange Online administration.
- Scripting ability in PowerShell or Python, and experience automating email security operations through APIs.
Preferred Qualifications
- Certification such as Microsoft SC-200, MS-203, GCIA, or a vendor email security credential.
- Experience integrating email telemetry with a SIEM and building automated phishing response playbooks.
