Senior Security Engineer - Proofpoint and Vulnerability Management

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

This is a remote role based in the US.

We are looking for a Security Engineer with hands‑on experience in Proofpoint Email Security, Vulnerability Management, and Incident Response skills. The candidate will support day‑to‑day security operations, email threat monitoring and remediation, vulnerability tracking, remediation coordination, and incident handling. Exposure to Crowd Strike Endpoint Security will be considered an added advantage.

• Administer and support Proofpoint email security platforms, including PPS, TAP, TRAP, URL Defense, Attachment Defense, and related email protection controls.
• Monitor email security health, investigate phishing or malicious email alerts, and support remediation of email‑based threats.
• Configure and maintain email security policies such as spam filtering, impersonation protection, DLP, encryption, SPF, DKIM, and DMARC.
• Support Vulnerability Management activities including scan review, vulnerability validation, risk prioritization, remediation tracking, and SLA follow‑up.
• Work with application, infrastructure, and security teams to coordinate patching and closure of vulnerabilities.
• Assist in Incident Response activities by analyzing alerts, gathering evidence, supporting containment, and documenting incident outcomes.
• Prepare regular reports, dashboards, and service health summaries for operational and leadership review.
• Support integration of security tools with SIEM, SOAR, Azure AD, M365, ITSM, or CMDB platforms where applicable.
• Provide secondary support for Crowd Strike Falcon endpoint security alerts, endpoint investigation, and coordination with endpoint or SOC teams.

• 5 to 8 years of experience in cybersecurity operations, email security, vulnerability management, or incident response.
• Hands‑on experience with Proofpoint solutions such as PPS, TAP, TRAP, DLP, URL Defense, and Attachment Defense.
• Working knowledge of phishing analysis, email threat campaigns, malware indicators, and malicious payload investigation.
• Experience with vulnerability scanning tools such as Qualys, Tenable, Rapid7, Wiz, or similar platforms.
• Understanding of CVE, CVSS, remediation prioritization, patching workflows, and risk‑based vulnerability management.
• Basic understanding of incident response lifecycle, alert triage, evidence collection, escalation, and documentation.
• Familiarity with Microsoft 365, Exchange Online, hybrid mail environments, SMTP, DNS, TLS, and mail‑flow routing.
• Exposure to Crowd Strike Falcon endpoint security is preferred.

• Knowledge of SIEM/SOAR workflows and SOC operations.
• Exposure to Crowd Strike Falcon, Defender, or other EDR tools.
• Understanding of CIS benchmarks, OWASP, NIST, and secure configuration standards.
• Certifications such as Security+, CEH, Proofpoint Certified Administrator, or equivalent cybersecurity certifications.

• Good communication and documentation skills.
• Ability to work with multiple technical teams and stakeholders.
• Strong analytical mindset and attention to detail.
• Ability to work in a fast‑paced global delivery environment.

• Proofpoint Email Security administration and platform support
• Vulnerability Management (Tenable or Qualys preferably)
• Incident Response
• Email threat analysis and phishing investigation
• Vulnerability…