- Threat Management Expert (Focus on Tenable &
- Proofpoint) – 1 position Proofpoint: Core Proofpoint Solutions: Deep expertise in Proofpoint Targeted Attack Protection (TAP), Threat Response Auto-Pull (TRAP), and Data Loss Prevention (DLP) Policy &
- Detection Engineering: Fine-tune DLP policies, classification rules, and encryption configurations to maximize true positives and reduce false positives. Develop custom regular expressions (Regex) and mail routing rules.
Policy Management: Oversee the creation and modification of spam rules, email firewall settings, and protected/block listing.
Threat
Hunting &
- Automation: Operationalize threat intelligence into custom detections.
Utilize SOAR/APIs to automate threat isolation and incident remediation workflows Mail Routing &
- Protocols: Comprehensive understanding of SMTP, MX records, SPF, DKIM, and DMARC.
Threat Analysis: Proficiency in email header analysis, URL/attachment defense, and identifying phishing indicators Incident Management: Lead and direct crisis/incident responses related to phishing, spoofing, and advanced malware. Manage operational ticket resolution and SLA hygiene.