Senior Security Engineer – Proofpoint & VM

Ampcus Inc. is a global provider of technology and business consulting services. The company is seeking a Senior Security Engineer to support Proofpoint email security, vulnerability management, security monitoring, remediation coordination, and incident response. The role also provides secondary support for endpoint security investigations and contributes to improving security operations processes.

Responsibilities:

• Administer and support Proofpoint email security solutions, including PPS, TAP, TRAP, URL Defense, Attachment Defense, DLP, and related email protection controls
• Monitor email security health and investigate phishing, malicious email, malware, and other email-based security threats
• Configure and maintain email security policies, including spam filtering, impersonation protection, DLP, encryption, SPF, DKIM, and DMARC
• Perform vulnerability management activities, including vulnerability scan review, validation, risk prioritization, remediation tracking, and SLA follow-up
• Coordinate with application, infrastructure, endpoint, and security teams to drive vulnerability remediation and closure
• Assist with Incident Response activities, including alert analysis, evidence collection, containment support, escalation, and incident documentation
• Analyze phishing campaigns, malicious payloads, indicators of compromise (IOCs), and other email-related threats
• Prepare operational reports, dashboards, vulnerability metrics, and security service health summaries for management and leadership review
• Support integration of security tools with SIEM, SOAR, Microsoft 365, Azure AD/Entra ID, ITSM, and CMDB platforms where applicable
• Provide secondary support for CrowdStrike Falcon alerts, endpoint investigations, threat analysis, and coordination with SOC or endpoint teams
• Contribute to continuous improvement of security monitoring, vulnerability remediation, and incident response processes

Requirements:

• 5–8 years of experience in cybersecurity operations, email security, vulnerability management, incident response, or a related security discipline
• Strong hands-on experience administering and supporting Proofpoint solutions such as PPS, TAP, TRAP, DLP, URL Defense, and Attachment Defense
• Practical experience with phishing analysis, email threat campaigns, malware indicators, and malicious payload investigation
• Experience with vulnerability management platforms such as Qualys, Tenable, Rapid7, Wiz, or similar tools
• Strong understanding of CVEs, CVSS scoring, vulnerability prioritization, remediation workflows, patch management, and risk-based vulnerability management
• Working knowledge of the Incident Response lifecycle, including alert triage, evidence collection, containment, escalation, documentation, and post-incident activities
• Familiarity with Microsoft 365, Exchange Online, hybrid mail environments, SMTP, DNS, TLS, and email routing/mail-flow concepts
• Ability to analyze security events and coordinate remediation across multiple technical teams
• Knowledge of SIEM/SOAR workflows and SOC operations
• Experience with CrowdStrike Falcon, Microsoft Defender, or other EDR platforms
• Understanding of CIS Benchmarks, OWASP, NIST frameworks, and secure configuration standards
• Relevant cybersecurity certifications such as Security+, CEH, Proofpoint Certified Administrator, or equivalent
• Strong analytical and problem-solving skills
• Excellent communication and technical documentation abilities
• Strong attention to detail
• Ability to collaborate effectively with multiple technical teams and stakeholders
• Ability to work independently in a fast-paced, global security operations environment
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Security, or a related field
• Exposure to CrowdStrike Falcon Endpoint Security is preferred