Senior Security Engineer – Proofpoint & VM

Apolis is seeking a Senior Security Engineer to support cybersecurity operations across email security, vulnerability management, and incident response. The role administers Proofpoint platforms, monitors and remediates email threats, coordinates vulnerability remediation, supports incident investigations, and provides secondary support for CrowdStrike Falcon.

Responsibilities:

• Administer and support Proofpoint email security platforms, including PPS, TAP, TRAP, URL Defense, Attachment Defense, and related email protection controls
• Monitor email security health, investigate phishing or malicious email alerts, and support remediation of email-based threats
• Configure and maintain email security policies such as spam filtering, impersonation protection, DLP, encryption, SPF, DKIM, and DMARC
• Support Vulnerability Management activities including scan review, vulnerability validation, risk prioritization, remediation tracking, and SLA follow-up
• Work with application, infrastructure, and security teams to coordinate patching and closure of vulnerabilities
• Assist in Incident Response activities by analyzing alerts, gathering evidence, supporting containment, and documenting incident outcomes
• Prepare regular reports, dashboards, and service health summaries for operational and leadership review
• Support integration of security tools with SIEM, SOAR, Azure AD, M365, ITSM, or CMDB platforms where applicable
• Provide secondary support for CrowdStrike Falcon endpoint security alerts, endpoint investigation, and coordination with endpoint or SOC teams

Requirements:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field
• 5 to 8 years of experience in cybersecurity operations, email security, vulnerability management, or incident response
• Hands-on experience with Proofpoint solutions such as PPS, TAP, TRAP, DLP, URL Defense, and Attachment Defense
• Working knowledge of phishing analysis, email threat campaigns, malware indicators, and malicious payload investigation
• Experience with vulnerability scanning tools such as Qualys, Tenable, Rapid7, Wiz, or similar platforms
• Understanding of CVE, CVSS, remediation prioritization, patching workflows, and risk-based vulnerability management
• Basic understanding of incident response lifecycle, alert triage, evidence collection, escalation, and documentation
• Familiarity with Microsoft 365, Exchange Online, hybrid mail environments, SMTP, DNS, TLS, and mail-flow routing
• Knowledge of SIEM/SOAR workflows and SOC operations
• Exposure to CrowdStrike Falcon, Defender, or other EDR tools
• Understanding of CIS benchmarks, OWASP, NIST, and secure configuration standards
• Certifications such as Security+, CEH, Proofpoint Certified Administrator, or equivalent cybersecurity certifications
• Exposure to CrowdStrike Falcon endpoint security is preferred