Senior Cloud Email Security Analyst

Greenberg Traurig (GT), a global law firm with locations across the world in 15 countries, has an exciting employment opportunity for you. We offer competitive compensation and an excellent benefits package along with the opportunity to work within an innovative and collaborative environment.

Join our Technology Team team as a Senior Cloud Email Security Analyst located in various offices.

We are seeking a professional who thrives in a fast-paced, deadline-driven environment. The ideal candidate possesses strong problem-solving and decision-making abilities, ensuring efficiency and accuracy in every task. With a dedicated work ethic and a can-do attitude, you will take initiative and approach challenges with confidence and resilience. Excellent communication skills are essential for collaborating effectively across teams and delivering exceptional client service.

If you are someone who demonstrates initiative, adaptability, and innovation, we invite you to join our team.

This role can be based in various offices on a hybrid basis. This role reports to the Director of Enterprise Messaging.

Position Summary:

Under the direction of the Enterprise Messaging Manager, the Senior Cloud Email Security Analyst supports and improves the organization’s cloud email security services. This role administers email security platforms, investigates email-based threats, maintains secure mail flow and authentication controls, and works with Technology, Information Security, Legal, and vendors to protect a large Microsoft 365 environment. The analyst works independently on complex issues, provides senior-level technical guidance, and helps improve operational procedures and security controls.

Key Responsibilities:

Administers, monitors, maintains, and tunes enterprise email security platforms, primarily Proofpoint and Microsoft 365 email security services. Supports Exchange Online, Exchange Online Protection, Microsoft Defender for Office 365, and related mail-flow and threat-protection features. Maintains and troubleshoots inbound, outbound, internal, application, partner, and secure-relay mail flow in cloud and hybrid environments. Manages email authentication and domain-protection controls, including SPF, DKIM, DMARC, TLS, DNS records, certificates, and third-party sender onboarding.

Investigates phishing, business email compromise, spoofing, malware, malicious links or attachments, account compromise, and other email-related security events. Performs message tracing, header and URL analysis, threat hunting, log review, evidence collection, containment, and post-delivery remediation. Uses Power Shell and available APIs to automate routine administration, reporting, monitoring, and remediation activities. Coordinates with Information Security, Identity, Compliance, Legal, Service Desk, application teams, and vendors on incidents, changes, and email security requirements.

Creates and maintains technical documentation, procedures, change records, test plans, service reports, and operational metrics. Provides senior escalation support, shares knowledge with other support teams, and assists with vendor evaluations, upgrades, and security improvements. Participates in disaster recovery, control testing, scheduled maintenance, and an on-call rotation for urgent incidents or service-impacting events. Performs other duties as assigned or required.

Qualifications:

Skills and Competencies Strong hands-on experience administering Proofpoint enterprise email security products and Microsoft 365 email security services. Strong knowledge of Exchange Online, EOP, Microsoft Defender for Office 365, mail routing, connectors, transport rules, quarantine, and message tracing. Strong understanding of SMTP, MIME, DNS, email headers, TLS, certificates, SPF, DKIM, DMARC, and common third-party sending services. Experience investigating and responding to phishing, business email compromise, spoofing, account compromise, malware, and other email-based threats.

Proficiency with Power Shell and familiarity with Microsoft Graph, REST APIs, security analytics, and SIEM concepts. Working knowledge of Microsoft Entra , role-based access, Conditional Access, and Microsoft Purview capabilities related to email. Ability to manage multiple priorities, follow change and incident-management processes, and produce clear technical documentation. Strong analytical, communication, collaboration, and customer-service skills, including the ability to explain technical risk to…