Note: The job is a remote job and is open to candidates in USA. Capgemini is a global business and technology transformation partner. The Senior Security Engineer will support Proofpoint email security, vulnerability management, incident response, threat monitoring, remediation coordination, reporting, and integrations with related security and IT platforms.
Responsibilities
- Administer and support Proofpoint email security platforms, including PPS, TAP, TRAP, URL Defense, Attachment Defense, and related email protection controls
- Monitor email security health, investigate phishing or malicious email alerts, and support remediation of email-based threats
- Configure and maintain email security policies such as spam filtering, impersonation protection, DLP, encryption, SPF, DKIM, and DMARC
- Support Vulnerability Management activities including scan review, vulnerability validation, risk prioritization, remediation tracking, and SLA follow-up
- Work with application, infrastructure, and security teams to coordinate patching and closure of vulnerabilities
- Assist in Incident Response activities by analyzing alerts, gathering evidence, supporting containment, and documenting incident outcomes
- Prepare regular reports, dashboards, and service health summaries for operational and leadership review
- Support integration of security tools with SIEM, SOAR, Azure AD, M365, ITSM, or CMDB platforms where applicable
- Provide secondary support for CrowdStrike Falcon endpoint security alerts, endpoint investigation, and coordination with endpoint or SOC teams
Skills
- 5 to 8 years of experience in cybersecurity operations, email security, vulnerability management, or incident response
- Hands-on experience with Proofpoint solutions such as PPS, TAP, TRAP, DLP, URL Defense, and Attachment Defense
- Working knowledge of phishing analysis, email threat campaigns, malware indicators, and malicious payload investigation
- Experience with vulnerability scanning tools such as Qualys, Tenable, Rapid7, Wiz, or similar platforms
- Understanding of CVE, CVSS, remediation prioritization, patching workflows, and risk-based vulnerability management
- Basic understanding of incident response lifecycle, alert triage, evidence collection, escalation, and documentation
- Familiarity with Microsoft 365, Exchange Online, hybrid mail environments, SMTP, DNS, TLS, and mail-flow routing
- Knowledge of SIEM/SOAR workflows and SOC operations
- Exposure to CrowdStrike Falcon, Defender, or other EDR tools
- Understanding of CIS benchmarks, OWASP, NIST, and secure configuration standards
- Certifications such as Security+, CEH, Proofpoint Certified Administrator, or equivalent cybersecurity certifications
- Good communication and documentation skills
- Ability to work with multiple technical teams and stakeholders
- Strong analytical mindset and attention to detail
- Ability to work in a fast-paced global delivery environment
- Proofpoint Email Security administration and platform support
- Vulnerability Management (Tenable or Qualys preferably)
- Incident Response
- Email threat analysis and phishing investigation
- Vulnerability remediation tracking and reporting
- CrowdStrike Falcon Endpoint Security
- Endpoint detection and response support
- Basic threat hunting and endpoint alert triage
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field
- Exposure to CrowdStrike Falcon endpoint security is preferred
Benefits
- This is a remote role based in the US.
- Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
- Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
- Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
- Life and disability insurance
- Employee assistance programs
Company Overview
Company H1B Sponsorship