Note: The job is a remote job and is open to candidates in USA. Capgemini is a global business and technology transformation partner. The company is seeking a Senior Security Engineer to support Proofpoint email security administration, vulnerability management, and incident response, including threat monitoring, remediation coordination, reporting, and security tool integration.
Responsibilities
- Administer and support Proofpoint email security platforms, including PPS, TAP, TRAP, URL Defense, Attachment Defense, and related email protection controls
- Monitor email security health, investigate phishing or malicious email alerts, and support remediation of email-based threats
- Configure and maintain email security policies such as spam filtering, impersonation protection, DLP, encryption, SPF, DKIM, and DMARC
- Support Vulnerability Management activities including scan review, vulnerability validation, risk prioritization, remediation tracking, and SLA follow-up
- Work with application, infrastructure, and security teams to coordinate patching and closure of vulnerabilities
- Assist in Incident Response activities by analyzing alerts, gathering evidence, supporting containment, and documenting incident outcomes
- Prepare regular reports, dashboards, and service health summaries for operational and leadership review
- Support integration of security tools with SIEM, SOAR, Azure AD, M365, ITSM, or CMDB platforms where applicable
- Provide secondary support for CrowdStrike Falcon endpoint security alerts, endpoint investigation, and coordination with endpoint or SOC teams
Skills
- This is a remote role based in the US
- 5 to 8 years of experience in cybersecurity operations, email security, vulnerability management, or incident response
- Hands-on experience with Proofpoint solutions such as PPS, TAP, TRAP, DLP, URL Defense, and Attachment Defense
- Working knowledge of phishing analysis, email threat campaigns, malware indicators, and malicious payload investigation
- Experience with vulnerability scanning tools such as Qualys, Tenable, Rapid7, Wiz, or similar platforms
- Understanding of CVE, CVSS, remediation prioritization, patching workflows, and risk-based vulnerability management
- Basic understanding of incident response lifecycle, alert triage, evidence collection, escalation, and documentation
- Familiarity with Microsoft 365, Exchange Online, hybrid mail environments, SMTP, DNS, TLS, and mail-flow routing
- Knowledge of SIEM/SOAR workflows and SOC operations
- Exposure to CrowdStrike Falcon, Defender, or other EDR tools
- Understanding of CIS benchmarks, OWASP, NIST, and secure configuration standards
- Certifications such as Security+, CEH, Proofpoint Certified Administrator, or equivalent cybersecurity certifications
- Good communication and documentation skills
- Ability to work with multiple technical teams and stakeholders
- Strong analytical mindset and attention to detail
- Ability to work in a fast-paced global delivery environment
- Proofpoint Email Security administration and platform support
- Vulnerability Management (Tenable or Qualys preferably)
- Incident Response
- Email threat analysis and phishing investigation
- Vulnerability remediation tracking and reporting
- CrowdStrike Falcon Endpoint Security
- Endpoint detection and response support
- Basic threat hunting and endpoint alert triage
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field
- Exposure to CrowdStrike Falcon endpoint security is preferred
Benefits
- This is a remote role based in the US.
- Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
- Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
- Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
- Life and disability insurance
- Employee assistance programs
- Other benefits as provided by local policy and eligibility
Company Overview
Company H1B Sponsorship