GMS-Senior- Email Security-ProofPoint

at EY

Location:

Employment Type: full_time


Job Description

<p><span style="font-family:Arial, Helvetica, sans-serif"><span style="font-size:11.0px">At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. </span></span></p><p> </p><p> </p><p> </p><p> </p><p><strong><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Email Security – Senior</span></strong></p><p><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">As part of our EY-Cyber security in the Technology Consulting team, your role will be primarily responsible for the daily monitoring and/or maintenance of the enterprise Endpoint &amp; Email Security tools/solutions. The main duties of the person in this role will include proper care and administration of the Email Security and EDR\XDR tools, monitoring and responding to the alerts that generate from the tool. This person will interface with IT Operations, Network Operations, Infrastructure teams, Legal, Risk Management, etc.</span></p><p> </p><p><strong><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">The opportunity</span></strong></p><p> </p><p><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">We’re looking for Senior Security consultant in the Technology Consulting team to work on various infrastructure and endpoint protection related projects for our customers across the globe. In line with EY’s commitment to quality, consultant shall confirm that work is of the highest quality as per EY’s quality standards and is reviewed by the next-level reviewer. As an influential member of the team, consultant shall help to create a positive learning culture, coach and counsel junior team members and help them to develop.</span></p><p> </p><p><strong><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Your key responsibilities</span></strong></p><ul><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Design, implement, and maintain Email security solutions (Proofpoint/M365) to safeguard Email flow,</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Manage and respond to the security alerts triggered for email security solution.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Collaborate with cross-functional teams to integrate security solutions and ensure seamless operations.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Monitor and analyse security incidents, responding promptly to security breaches and user incidents.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Stay updated on industry best practices and emerging security threats, adapting security protocols as needed.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Perform regular security audits and security assessments to identify and mitigate risks.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Develop and maintain security documentation, policies, and procedures.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Provide technical support and guidance to other IT teams to enhance overall security posture.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Troubleshoot and resolve security-related issues in a timely manner.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Continuously improve and optimize security processes and procedures to enhance efficiency and effectiveness.</span></li></ul><p> </p><p><strong><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Skills and attributes for success</span></strong></p><ul><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Should be a good team player.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Excellent verbal and written communication skill.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Proficient Documentation and Power Point skills</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Good social, communication and technical writing skills</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Should interface with internal and external clients.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Strong analytical/problem solving skills.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Ability to prioritize tasks and work accurately under pressure in order to meet deadlines.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Should understand and follow workplace policies and procedures.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Should independently manage the assigned project/engagement with minimal oversight/guidance from the manager.</span></li></ul><p> </p><p><strong><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">To qualify for the role, you must have</span></strong></p><ul><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Bachelor’s degree in computer science, Information Security, or a related field.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">4 to 7 years of professional experience in information security with a focus on email security, security incident management, EDR solutions.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Hands-on experience on email security (e.g. phishing Campaigns), phishing Campaigns and its components.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Hands-on experience on EDR solutions (e.g. CrowdStrike, Defender, CarbonBlack) at enterprise levels.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Design, implement and maintain email solution, EDR solutions at enterprise levels.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Should have deep knowledge on ITIL process.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Handle security escalations as L2/L3.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Strong understanding of email security, M365, EDR solution and technology.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Experience with Proofpoint incident handling process and risk mitigation.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Implementation and Configuration of email security solution alerts and triaging based on security impact and business requirement.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Implementation and Configuration of email EDR solution along with security architecture inline to business requirement.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Setting up access controls and policies to govern who can access, modify, or delete protected data.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Ensuring that data security practices align with regulatory compliance requirements, industry standards, and specific organizational policies.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Creating Adhoc dashboards and insights on Security posture of application.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Configuring monitoring and alerting systems to detect and respond to security incidents and unauthorized access.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Implement and configure the integration of Security tools.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Developing and implementing endpoint security policies and best practices.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Create and maintain procedural documents (SOP's)</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Secondary skill required: Encryption/Network Security/SIEM/Certificate</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Relevant certifications such as CISSP, CISM, or relevant certificates are a plus.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Proficiency in security tools and technologies.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Excellent problem-solving skills and attention to detail.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Strong communication and teamwork skills.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Ability to work independently and manage multiple tasks.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Willingness to stay current with evolving security technologies and threats.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Ability to communicate in a clear and concise manner.</span></li><li><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Ability to work in 24x7 shifts.</span></li></ul><p> </p><p><strong><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Ideally, you’ll also have</span></strong></p><p> </p><p><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">Professional certificate or be actively pursuing related professional certifications such as the CompTIA Security+, CEH, CISSP or Vendor/Technical certification. If not, certified candidates are expected to complete one of the businesses required certifications within 12 months of hire.</span></p><p><span style="font-family:arial, helvetica, sans-serif;font-size:10.0pt">To expect some weekend work and 20%-30% travel based on job requirement.</span></p><p> </p><p><span style="font-family:Arial, Helvetica, sans-serif"><span style="font-size:11.0px"><b>EY | Building a better working world </b></span></span></p><p><br><span style="font-family:Arial, Helvetica, sans-serif"><span style="font-size:11.0px"> <br>EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.  </span></span></p><p><br><span style="font-family:Arial, Helvetica, sans-serif"><span style="font-size:11.0px"> <br>Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.  </span></span></p><p><br><span style="font-family:Arial, Helvetica, sans-serif"><span style="font-size:11.0px"> <br>Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.  </span></span></p>