The Cybersecurity Ops Technologist I (Email Security) will administer and improve Travelers’ Proofpoint email security capabilities, owning email threat prevention, authentication, and mail flow across a hybrid Microsoft 365 and on-premises Exchange environment.
Location
Hartford, CT (onsite)
Salary
USD 99,100 - 163,400 per year
Summary
This role optimizes Proofpoint email security operations, including threat containment, detection tuning, and quarantine strategies. The position serves as the email security escalation point for troubleshooting, including analysis of message trace, header forensics, and delivery or authentication failures.
Responsibilities
- Administer and optimize the enterprise Proofpoint deployment, including Targeted Attack Protection (TAP), Threat Response Auto-Pull (TRAP), Secure Email Relay, Adaptive Email Security/Email DLP, Email Isolation, and Email Fraud Defense to protect a hybrid M365/on-premises Exchange environment.
- Design, configure, and maintain secure email gateway rulesets, mail flow policies, and quarantine management strategies to balance threat containment with business continuity across 50,000+ mailboxes.
- Own DKIM, SPF, and DMARC strategy end-to-end by authoring and maintaining records, tuning alignment and enforcement policies, and troubleshooting authentication failures across multiple sending domains and third-party senders.
- Manage and troubleshoot mail relay and connector configurations across Microsoft 365 and on-premises Exchange to ensure reliable mail flow through the Proofpoint gateway.
- Analyze internal and external threat intelligence and TAP telemetry to identify emerging phishing, BEC, and malware campaigns, then tune detection rules and policies accordingly.
- Partner with the SOC to build and refine automated response playbooks for email-borne threats, including TRAP-driven message remediation.
- Serve as the email security escalation point for operational inquiries and troubleshooting by providing technical analysis on message trace, header forensics, and delivery or authentication failures.
- Evaluate and integrate complementary controls such as M365 Defender for Office 365 (Safe Links, Safe Attachments, Threat Explorer) to strengthen a layered email defense strategy.
- Communicate email threat trends, platform health, and risk posture clearly to security leadership and business stakeholders.
- Perform other duties as assigned.
Requirements
- Degree or Certificate in Cybersecurity, Computer Science, or related field.
- 3+ years of dedicated email security engineering experience, including hands-on administration of Proofpoint (TAP, TRAP, Secure Email/Secure Email Relay, Adaptive Email Security, Email Isolation, Email Fraud Defense, CLEAR) within a large enterprise deployment (strongly preferred).
- Alternatively, multiple years of comparable, production-level experience administering another leading secure email gateway platform (e.g., Mimecast, Cisco Secure Email/IronPort, Microsoft Defender for Office 365, Abnormal Security, Barracuda), with demonstrated command of secure email gateway architecture and policy management at scale.
- Proven experience configuring and managing quarantine policies, end-user digest and release workflows, and gateway rulesets in a high-volume mail environment.
- Deep working knowledge of DKIM, SPF, and DMARC, including ability to design authentication strategy, diagnose alignment or enforcement failures, and manage third-party sender exceptions independently.
- Solid understanding of email relay architecture, MX/connector design, and mail flow troubleshooting in a hybrid Microsoft 365 and on-premises Exchange environment.
- Experience working within an Email Security group or an email-focused response function of a SOC, with familiarity in incident handling methodologies as applied to phishing, BEC, and email-delivered malware.
- Understanding of M365 Defender for Office 365 and how it complements a Proofpoint-led defense-in-depth strategy is a plus.
- Ability to translate technical email threat findings into clear risk insights for technical and non-technical stakeholders.
- Bachelor’s degree or its equivalent in work experience.
- 2 years of experience working in a Technology related field or role.
Technologies
- Proofpoint, Targeted Attack Protection (TAP), Threat Response Auto-Pull (TRAP), Secure Email Relay, Adaptive Email Security, Email DLP, Email Isolation, Email Fraud Defense, CLEAR
- DKIM, SPF, DMARC
- Microsoft 365, Microsoft Defender for Office 365, Safe Links, Safe Attachments, Threat Explorer, M365 Defender for Office 365
- MIMECAST, Cisco Secure Email/IronPort, Abnormal Security, Barracuda
- MTA, Mx/connector design
Benefits
- Health Insurance
- Retirement: Travelers matches your 401(k) contributions dollar-for-dollar up to your first 5% of eligible pay, subject to an annual maximum
- Paid Time Off: minimum of 20 days Paid Time Off annually, plus nine paid company Holidays
- Wellness Program
- Volunteer Encouragement: Matching Gift and Volunteer Rewards program
- Pension Plan that is 100% funded by Travelers
Compensation Overview
The annual base salary range provided is a nationwide market range and represents a broad range of salaries for this role across the country. Actual salary will be determined based on factors including scope, complexity, and location; candidate skills, education, training, credentials, and experience; and other conditions of employment. Employees are also eligible for performance-based cash incentive awards as part of Travelers’ comprehensive compensation and benefits program.
Employment Practices
Travelers is an equal opportunity employer. The company values the unique abilities and talents each individual brings and recognizes that it benefits from differences.
