The Proofpoint L3 Operations Engineer serves as the technical SME for the Proofpoint environment and is responsible for advanced troubleshooting, platform optimisation, configuration management, security enhancements, integrations, and engineering support. The role owns complex incidents, problem management, and platform improvements.
Responsibilities Advanced Troubleshooting
- Resolve complex email delivery and security incidents.
- Perform deep-dive analysis of:
- Mail flow failures
- TAP detections
- DLP events
- Email authentication failures
- Encryption issues
- Analyse SMTP transactions, logs, headers, and threat intelligence data.
- Support tenant expansion and implementation initiatives.
Security Enhancements
- Optimise threat detection and false-positive reduction.
- Evaluate emerging email threats and protection strategies.
- Provide security recommendations to leadership and stakeholders.
- Support API-based integrations and automation initiatives.
Problem & Change Management
- Lead root cause analysis activities.
- Own problem records and long-term remediation plans.
- Review and approve platform changes.
- Participate in CAB activities.
Technical Leadership
- Mentor L1 and L2 engineers.
- Develop operational runbooks and knowledge articles.
- Provide escalation support during major incidents.
Monitoring & Analytics
- Microsoft Sentinel
- Defender for Office 365
- SIEM Correlation
Experience
- 6-10 years of cybersecurity or messaging security experience.
- 4+ years of hands-on Proofpoint administration and engineering.
- Experience in enterprise-scale email security environments.