Sr Lead Security Engineer - Email

Senior Lead Security Engineer role focused on enterprise email security strategy, architecture, engineering, and platform lifecycle management for critical business communications.

Responsibilities

• Own strategy, architecture, engineering, and lifecycle management for enterprise email security platforms.
• Define and drive the email security roadmap across secure email gateways, phishing protection, threat detection and response, encryption, and data loss prevention (DLP), including cloud-based security services.
• Act as technical authority for email security architecture, ensuring alignment with cybersecurity expectations, resiliency needs, regulatory obligations, and multi-level security requirements.
• Partner with Cyber, Technology, Risk, Compliance, Audit, and business stakeholders to assess threats, prioritize investments, clarify security requirements, and manage security risk.
• Lead complex engineering and modernization programs from concept to deployment, including proof-of-value, migrations, technology upgrades, and platform transformations.
• Drive incident response, threat analysis, risk assessments, and remediation for phishing, business email compromise (BEC), malicious email campaigns, and evolving email-borne threats.
• Establish metrics, KPIs, and reporting covering platform effectiveness, threat reduction, operational performance, resiliency, and business value.
• Create executive-ready materials including strategy papers, management updates, and governance communications for senior leadership, risk committees, and oversight forums.
• Manage vendor relationships to enforce accountability for product roadmaps, operational performance, risk remediation, and contractual commitments.
• Mentor and lead engineering teams, promoting innovation, operational excellence, continuous improvement, and effective resource management during disruptive events.
• Use enterprise-authorized AI capabilities and a reuse-first engineering approach to accelerate security analysis, testing, control validation, and documentation while protecting data, supporting auditability, and meeting compliance needs.

Requirements

• 10+ years of cybersecurity experience, including significant experience leading enterprise email security programs and engineering teams.
• Deep expertise in email security technologies: secure email gateways, phishing protection, threat detection, encryption, cloud email security platforms, and email authentication standards: SPF, DKIM, and DMARC.
• Proven experience designing, implementing, and operating enterprise-scale security architectures in highly regulated environments.
• Advanced knowledge of software engineering and technical disciplines, including cloud computing, artificial intelligence, machine learning, or related technologies.
• Strong background in threat modeling, vulnerability assessments, penetration testing, risk analysis, and security control validation.
• Advanced proficiency in one or more programming or automation languages, with the ability to solve complex technical problems independently.
• Demonstrated experience applying enterprise-authorized AI in engineering workflows, including validating AI-assisted recommendations and accounting for data sensitivity, resiliency, and audit requirements.
• Strong understanding of cybersecurity frameworks, risk management practices, regulatory expectations, and audit requirements.
• Demonstrated ability to lead large cross-functional initiatives across Cybersecurity, Infrastructure, Engineering, Risk, Compliance, Audit, Vendor Management, and business organizations.
• Strong executive communication skills, including experience presenting technical strategies, risks, business cases, roadmaps, metrics, investment recommendations, and program status to senior leadership.
• Exceptional leadership and influence, with strong problem-solving skills to build consensus, drive decisions, balance strategic priorities, and deliver measurable risk-reduction outcomes.

Technologies

• SPF
• DKIM
• DMARC
• Cloud computing
• Artificial intelligence
• Machine learning

Preferred Qualifications

• Experience securing Microsoft 365, Exchange Online, Local Exchange/Outlook, and similar enterprise email security platforms.
• Experience leading large-scale email security transformation or modernization initiatives.
• CISSP, CCSP, CISM, or equivalent industry certifications.
• Experience in financial services, banking, or another highly regulated industry.
• Experience supporting regulatory examinations, internal audits, and third-party risk assessments.
• Familiarity with AI-driven security operations, threat detection, and email risk analytics.

Location: Jersey City, NJ (onsite)

Compensation: USD 175,750 - 260,000 per year