Cybersecurity Ops Technologist I (Email Security

Who Are We?

Taking care of our customers, our communities and each other. That's the Travelers Promise. By honoring this commitment, we have maintained our reputation as one of the best property casualty insurers in the industry for over 170 years. Join us to discover a culture that is rooted in innovation and thrives on collaboration. Imagine loving what you do and where you do it.

Technology

The annual base salary range provided for this position is a nationwide market range and represents a broad range of salaries for this role across the country. The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment.

As part of our comprehensive compensation and benefits program, employees are also eligible for performance-based cash incentive awards.

$99,100.00 - $

1

Cybersecurity operations is responsible for the identification, protection, detection, response and disruption of cybersecurity events across Travelers through critical analysis, threat intelligence gathering, and agile cybersecurity techniques to assess, support, and resolve cyber incidents. Within Cybersecurity Operations, our Email Security team protects a complex messaging environment with a hybrid architecture spanning more than 50,000 mailboxes. As a Cybersecurity Ops Technologist I on this team, you will own the day-to-day administration, configuration, and optimization of our Proofpoint infrastructure, acting as the subject-matter authority on email threat prevention, authentication, and mail flow across Travelers.

This is a hands-on technical operations role for someone who has deep, product-level expertise in enterprise email security and is ready to apply that expertise at scale.

• Administer and optimize our enterprise Proofpoint deployment — including Targeted Attack Protection (TAP), Threat Response Auto-Pull (TRAP), Secure Email Relay, Adaptive Email Security/Email DLP, Email Isolation, and Email Fraud Defense — to protect a hybrid M365/on-premises Exchange environment.
• Design, configure, and maintain secure email gateway rulesets, mail flow policies, and quarantine management strategies, balancing threat containment against business continuity across 50,000+ mailboxes.
• Own DKIM, SPF, and DMARC strategy end-to-end: authoring and maintaining records, tuning alignment and enforcement policies, and troubleshooting authentication failures across multiple sending domains and third-party senders.
• Manage and troubleshoot complex mail relay and connector configurations spanning Microsoft 365 and on-premises Exchange, ensuring reliable mail flow through the Proofpoint gateway.
• Analyze internal and external threat intelligence and TAP telemetry to identify emerging phishing, BEC, and malware campaigns targeting the organization, and tune detection rules and policies in response.
• Partner with the SOC to build and refine automated response playbooks for email-borne threats, including TRAP-driven message remediation.
• Serve as the email security escalation point of contact for operational inquiries and troubleshooting, providing technical analysis on message trace, header forensics, and delivery/authentication failures.
• Evaluate and integrate complementary controls such as M365 Defender for Office 365 (Safe Links, Safe Attachments, Threat Explorer) to strengthen a layered email defense strategy.
• Communicate email threat trends, platform health, and risk posture clearly to security leadership and business stakeholders.
• Perform other duties as assigned.

• Degree or Certificate in Cybersecurity, Computer Science, or related field.
• 3+ years of dedicated email security engineering experience, including substantial hands-on administration of the Proofpoint platform (TAP, TRAP, Secure Email/Secure Email Relay, Adaptive Email Security, Email Isolation, Email Fraud Defense, CLEAR) within a large enterprise deployment — strongly preferred for…