Security Track Specialist
Summary
Security specialist focused on Proofpoint and Tenable to manage email security, DLP policies, and threat hunting using SOAR automation and incident response.
Vulnerability & Threat Management Expert (Focus on Tenable & Proofpoint) – 1 position Proofpoint: Core Proofpoint Solutions: Deep expertise in Proofpoint Targeted Attack Protection (TAP), Threat Response Auto-Pull (TRAP), and Data Loss Prevention (DLP) Policy & Detection Engineering: Fine-tune DLP policies, classification rules, and encryption configurations to maximize true positives and reduce false positives. Develop custom regular expressions (Regex) and mail routing rules. Policy Management: Oversee the creation and modification of spam rules, email firewall settings, and safe/block listing. Threat Hunting & Automation: Operationalize threat intelligence into custom detections. Utilize SOAR/APIs to automate threat isolation and incident remediation workflows Mail Routing & Protocols: Comprehensive understanding of SMTP, MX records, SPF, DKIM, and DMARC. Threat Analysis: Proficiency in email header analysis, URL/attachment defense, and identifying phishing indicators Incident Management: Lead and direct crisis/incident responses related to phishing, spoofing, and advanced malware. Manage operational ticket resolution and SLA hygiene. Threat Mitigation: Analyze phishing emails, troubleshoot non-delivery issues, and deploy countermeasures.