We are looking for an experienced Email Operations & Trust & Safety Analyst to monitor, investigate, and mitigate email-related security threats, spam, phishing, and abuse. The ideal candidate should have hands-on experience with Splunk, email security operations, log analysis, and email authentication protocols.

The role involves identifying suspicious email activity, investigating security incidents, maintaining email security standards, and ensuring timely resolution of incidents in a 24×7 operational environment.

Key Responsibilities

- Monitor inbound and outbound email traffic to identify spam, phishing, spoofing, malware, and suspicious activities.

- Analyze email and security logs using Splunk to detect anomalies, investigate incidents, and identify threat patterns.

- Perform email header analysis to investigate message origins, routing paths, and authentication failures.

- Investigate email abuse, suspicious domains, malicious IP addresses, and compromised accounts.

- Support incident mitigation activities, including blocking malicious IPs/domains, quarantining suspicious emails, and updating blocklists, as per established SOPs.

- Troubleshoot email delivery issues, false positives, and email authentication failures.

- Work with email authentication protocols, including SPF, DKIM, and DMARC, to help prevent email spoofing and protect domain reputation.

- Document investigation findings, maintain incident records, and escalate critical issues to the relevant teams.

- Ensure adherence to SLAs, quality standards, security policies, and operational procedures.

- Collaborate with internal security, engineering, and operations teams to resolve email security incidents.

## Required Skills and Qualifications

- Minimum 2 years of relevant experience in Email Operations, Email Security,



Trust & Safety, Abuse Desk, or Security Operations Center (SOC).

- Hands-on experience with **Splunk** for log analysis, searching, monitoring, and investigating security events.

- Strong understanding of email protocols, including SMTP, and end-to-end email flow.

- Working knowledge of email authentication mechanisms: SPF, DKIM, and DMARC.

- Experience in identifying and investigating spam, phishing, spoofing, malicious domains, and email abuse.

- Knowledge of email header analysis and security incident investigation.

- Good analytical, troubleshooting, and problem-solving skills.

- Solid written and verbal communication skills for incident documentation and escalation.

- Willingness to work in 24×7 rotational shifts.

Preferred Qualifications

- Experience with email security platforms, SIEM tools, or threat monitoring solutions.

- Exposure to Microsoft Defender for Office 365, Proofpoint, Mimecast, or similar email security tools.

- Understanding of sender reputation, email deliverability, and domain security.

- Experience working with incident management systems and documented SOPs.

Key Performance Indicators (KPIs)

- Timely response and resolution of email security incidents within defined SLAs.

- Accuracy in identifying and classifying email threats.

- Quality and completeness of incident documentation.

- Compliance with security procedures and operational standards.

- Effective escalation and resolution of security-related issues.

Important Information

Candidates should have relevant hands-on experience in email security operations and Splunk-based log analysis. General IT support experience without relevant email security or investigation exposure may not be suitable for this role.

Pay: ₹750,000.00 - ₹800,000.00 per year

Work Location: In person

📌 Email Security (Hyderabad)
🏢 Realply Industries (P
📍 Hyderabad