Email Threat Monitoring & Response
Monitor email security gateways and dashboards for suspicious activities
Analyse and respond to:
Phishing emails
Email Encryption
Spam and spoofing attacks
Malware/ransomware attachments
Business Email Compromise (BEC)
Perform initial triage and investigation of email security alerts
Quarantine, block, or remove malicious emails from user mailboxes
Escalate critical incidents to L2/L3 or SOC teams
Email Security Administration
Configure and manage email security tools such as:
Microsoft Defender for Office 365
Proofpoint / Mimecast / Trend Micro (as applicable)
Manage email policies, rules, and threat filters
Support secure links, protected attachments, and anti-phishing policies
Review false positives and fine-tune detection rule
Support implementation and monitoring of: • SPF, DKIM, and DMARC • Detect and respond to email spoofing and domain impersonation • Assist in securing privileged email accounts
Data Security & Governance (Varonis)
Platform Monitoring & Health Management
Data Source Onboarding & Configuration
Alert Monitoring & Triage • Alert & Policy Optimization
Data Classification & Governance • Permissions & Access Governance
Reporting & Posture Management •
Integration & Automation Support
Daily/weekly operational checklists and reports.
Alert monitoring and escalation documentation.
Sensitive data exposure and permissions review reports. • Monthly posture review decks. • Updated SOPs and runbooks. •