DLP Security Engineer (Proofpoint)

Job Description

We are seeking a highly skilled and motivated Security Engineer with expertise in Proofpoint solutions to join our team. In this role, you will be responsible for ensuring the security, privacy, and integrity of our data across the organization. You will play a critical role in implementing, managing, and optimizing security measures to protect our systems, networks, and data from unauthorized access, cyber threats, and data breaches. The ideal candidate should have a strong background in cybersecurity, particularly in DLP of email security, cloud applications, endpoints and threat prevention with a proven ability to respond to evolving security challenges. An ideal candidate should also understand how to work in a client environment and be able to manage a duality of requests/deliverables.

Responsibilities:

Proofpoint Management:

Configure, deploy, integrate, and manage Proofpoint security solutions, including email security, data loss prevention (DLP), threat protection, and information protection.

Monitor and analyse Proofpoint alerts and logs to detect and respond to security incidents and threats.

Regularly update and optimise Proofpoint configurations to adapt to evolving threat landscapes and organisational needs.

Develop and maintain custom filters and rules within Proofpoint to enhance security measures tailored to organisational needs.

Collaborate with vendors and external partners for advanced troubleshooting and feature enhancements related to Proofpoint solutions.

Data Security and Privacy:

Design and enforce policies and procedures to ensure data security, privacy, and compliance with relevant regulations.

Conduct regular risk assessments and vulnerability scans to identify potential security risks and implement mitigation strategies.

Collaborate with cross-functional teams to ensure data security requirements are integrated into new projects and existing systems.

Lead incident response efforts related to email security breaches, ensuring quick containment and remediation.

Ensure compliance with industry standards and regulatory requirements related to data security and cybersecurity.

Prepare and deliver reports on security posture, incidents, and trends to management and stakeholders.

Assist in internal and external audits by providing documentation and evidence of security controls and processes.

Develop and deliver training programs for employees to increase awareness of security practices, especially regarding email security and phishing prevention.

Threat Intelligence and Incident Response:

Analyse threat intelligence to anticipate and mitigate potential cyber threats targeting the organisation.

Participate in or lead incident response activities related to email security breaches or data loss events.

Develop playbooks and procedures for responding to incidents involving Proofpoint solutions.

Collaboration and Support:

Provide guidance and support to other engineers and team members on security best practices and Proofpoint solutions.

Collaborate closely with IT teams to ensure seamless integration of security solutions with existing infrastructure and applications.

Engage with senior leadership to recommend and implement strategic security initiatives.

Document processes, configurations, and changes to ensure knowledge transfer and continuity within the team.

Qualifications

5+ years of experience in data security, cybersecurity, or a related field.

Hands-on experience with Proofpoint implementations (e.g., Email Protection, Targeted Attack Protection, Information Protection).

Proficiency in security technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), and SIEM.

Experience with ProofPoint in a cloud-based environment, specifically Microsoft 365

Excellent problem-solving skills and the ability to work under pressure in a fast-paced environment.

Relevant certifications (e.g., CISSP, CISM, CEH, Proofpoint certifications) are highly desirable.

Proficiency in scripting or automation (e.g., Python, PowerShell) for security operations is an advantage.

Key Competencies

Analytical and detail-oriented approach to problem-solving.

Strong communication skills, with the ability to explain complex security concepts to non-technical stakeholders.

Ability to work independently and as part of a team.

High ethical standards and a commitment to protecting sensitive information.

Proactive mindset with a continuous learning attitude towards emerging security threats and technologies.

Ability to add value to wider projects where Proofpoint may provide or have some crossover.

These enhancements aim to provide a more comprehensive overview of the role, emphasizing the importance of deployment, integration, proactive threat management, incident response, and collaboration with other teams.