Careers

Security Analyst II (Proofpoint SME)

ESSENTIAL JOB FUNCTIONS

  • Manage existing Proofpoint Advanced Threat Protection/Email Protection platforms including: Email Fraud Defense, Threat Response Auto-Pull, Targeted Attack Protection, Threat Response, Emerging Threats Intelligence, Data Loss Prevention (DLP) and Encryption
  • Implement new instances of the Proofpoint on Demand platform and configure for best- practices
  • Manage inbound and outbound security rules for email (filtering, whitelists, spam, etc)
  • Configure threat intelligence data feeds to provide identification of additional phishing/malware instances
  • Perform security event triage and initial incident response to detected threats
  • Assist other groups by providing email security log and troubleshooting information to resolve production issues
  • Regularly review and recommend changes to policies or controls as needed to enhance security
  • Identifies potential gaps and offers solutions to include internal team needs, product improvements and client security posture
  • Communicate and enforce Information Security policies
  • Coordinates with other team members and management to investigate, document, and report incidents
  • Regularly create and maintain high quality documentation for changes and procedures
  • Collaborate with our Threat Analysis Unit to provide in depth reports of confirmed security incidents and produce technical threat advisory broadcasts about new and emerging threats

 

REQUIREMENTS

  • Three or more years of experience as primary manager of Proofpoint Advanced Threat Protection and Proofpoint Email protection platforms
  • Strong email engineering skills; clear understanding of Message Transfer Agent configurations
  • Solid sense of self-motivation; ability to identify problems and develop solutions
  • Excellent oral and written communication skills
  • Ability and willingness to grow inside the platform and organization

 

PREFERRED QUALIFICATIONS

  • BS/BA degree in Computer Science, Information Systems, related discipline or equivalent experience, or over 5 years’ experience
  • 3-5 years of professional work experience in the cybersecurity industry
  • Strong analytical skills to define risk, identify potential threats, and develop and document action/mitigation plan
  • Strong interpersonal skills, ability to mentor/train staff and bring awareness to current and emerging threats
  • Ability to work efficiently and self-motivate with little to no supervision
  • Strong written and verbal communications skills with an ability to present technical risks and issues to technical and non-technical audiences internal and external to the organization
  • Certifications a plus
  • Regulatory experience is a plus (GDPR, ISO27K, SSAE16, HIPPA, PCI, FISMA, etc.)

 

ADDITIONAL

This is an onsite position in Franklin, TN.

Travel is not required.

The selected candidate will be required to pass an in-depth background check, credit check, and drug screen as a condition of employment.

Apply for This Position

About 5iron

5iron Active Cyber Defense solutions provide comprehensive detection and response, 24x7x365. We actively respond to events as they occur, requiring less bandwidth from our clients and taking the action needed to eliminate the threat before it causes disruption to client business or data. This approach enabled 5iron to be named to the 2022 Inc. 5000 list of fastest-growing private companies in the US.

5iron redefines industry expectations by taking an active role in the protection of our clients. Delivering 24x7x365 “eyes on” cybersecurity defense solutions, effectively minimizes cyber risk inside these organizations. Our active cyber defense solutions leverage years of information security experience to protect critical network infrastructure from the growing number of cyber threats.

5iron’s Security Operations Center (SOC) is located in Franklin, Tennessee and all security operations are run from this facility. 5iron does not use a Virtual SOC in which Security Analysts work from home or another remote location which can slow response times and affect client security. Our goal is more than notification—Our goal is response and resolution.