Sr Lead Security Engineer - Email

Responsibilities

• Lead the strategy, architecture, engineering, and lifecycle management of enterprise email security platforms.
• Define and execute roadmaps covering secure email gateways, phishing protection, threat detection and response, encryption, DLP, and cloud-based security services.
• Act as the technical authority for email security architecture and ensure alignment with cybersecurity, resiliency, regulatory, and multi-level security requirements.
• Lead proof-of-value evaluations, migrations, technology upgrades, platform transformations, and other complex engineering initiatives.
• Drive incident response, threat analysis, risk assessments, and remediation for phishing, business email compromise, malicious campaigns, and emerging email threats.
• Establish effectiveness, threat reduction, operational performance, resiliency, and business-value metrics and reporting.
• Present strategies, risks, business cases, roadmaps, and program updates to senior leadership, risk committees, and oversight forums.
• Manage vendor relationships and accountability for product roadmaps, operational performance, risk remediation, and contractual commitments.
• Mentor and lead engineering teams while managing resources and promoting operational excellence and continuous improvement.
• Use enterprise-authorized AI capabilities and reuse-first engineering practices for security analysis, testing, control validation, and documentation.

Requirements

• 10+ years of cybersecurity experience, including significant experience leading enterprise email security programs and engineering teams.
• Deep expertise in secure email gateways, phishing protection, threat detection, encryption, cloud email security platforms, and SPF, DKIM, and DMARC.
• Experience designing, implementing, and operating enterprise-scale security architectures in highly regulated environments.
• Advanced knowledge of software engineering, application development, cloud computing, artificial intelligence, machine learning, or related technical disciplines.
• Experience with threat modeling, vulnerability assessments, penetration testing, risk analysis, and security control validation.
• Advanced proficiency in at least one programming or automation language.
• Experience using enterprise-authorized AI capabilities while addressing data sensitivity, resiliency, and audit requirements.
• Strong understanding of cybersecurity frameworks, risk management, regulatory expectations, and audit requirements.
• Experience leading large cross-functional initiatives involving cybersecurity, infrastructure, engineering, risk, compliance, audit, vendor management, and business teams.
• Strong executive communication, leadership, influence, consensus-building, and problem-solving skills.
• Preferred experience securing Microsoft 365, Exchange Online, Local Exchange, Outlook, or similar enterprise email platforms.
• Preferred CISSP, CCSP, CISM, or equivalent industry certification.
• Preferred experience in financial services, banking, or another highly regulated industry, including regulatory examinations, internal audits, and third-party risk assessments.
• Preferred familiarity with AI-driven security operations, threat detection, and email risk analytics.

Benefits

• Comprehensive healthcare coverage.
• On-site health and wellness centers.
• Retirement savings plan.
• Backup childcare.
• Tuition reimbursement.
• Mental health support and financial coaching.
• Eligible roles may receive commission-based pay or discretionary incentive compensation.