Manager (Email Security Engineering)

Job Summary

The Manager for Email Security Engineering leads the team that protects the firm's messaging environment against phishing, business email compromise, malware delivery, and data loss. The role owns the secure email gateway and cloud email protection stack, the authentication posture of every sending domain, and the effectiveness of user reporting and automated remediation. It balances leadership of a distributed team with accountability for measurable reductions in successful email attacks.

Responsibilities

• Lead the email security engineering team, setting priorities, on-call coverage, and development plans for engineers across multiple locations.
• Own the strategy and roadmap for email protection, including gateway and cloud-native controls, sandboxing, impersonation defense, and post-delivery remediation.
• Drive the authentication program for all sending domains, moving SPF, DKIM, and DMARC to an enforcing posture without disrupting legitimate business mail.
• Partner with security operations and awareness teams on phishing response, user reporting workflows, and simulation results, and close the loop between findings and control changes.
• Report on catch rates, false positive rates, and mail flow health to security leadership, and support audit, privacy, and client assurance requests.
  
  
  

Required Qualifications

Skills and Experience

• English Level B2+
• Eight or more years in messaging or security engineering, including at least two years leading engineers as a manager or team lead.
• Expert knowledge of enterprise email security platforms such as Proofpoint, Mimecast, or Microsoft Defender for Office 365, and of Exchange Online mail flow.
• Proven delivery of a DMARC enforcement program across a complex estate of sending domains and third-party senders.
• Strong grasp of phishing and business email compromise tradecraft, and of the metrics that demonstrate control effectiveness.
  
  
  

Preferred Qualifications

• Certification such as CISSP, GCIA, or a vendor certification on the deployed email security platform.
• Experience with data loss prevention for email, encryption gateways, and automated phishing response playbooks.