Senior Security Engineer - Proofpoint and Vulnerability Management

Capgemini is a global business and technology transformation partner. The company is seeking a Senior Security Engineer to support Proofpoint email security administration, vulnerability management, and incident response, including threat monitoring, remediation coordination, reporting, and security tool integration.

Responsibilities:

• Administer and support Proofpoint email security platforms, including PPS, TAP, TRAP, URL Defense, Attachment Defense, and related email protection controls
• Monitor email security health, investigate phishing or malicious email alerts, and support remediation of email-based threats
• Configure and maintain email security policies such as spam filtering, impersonation protection, DLP, encryption, SPF, DKIM, and DMARC
• Support Vulnerability Management activities including scan review, vulnerability validation, risk prioritization, remediation tracking, and SLA follow-up
• Work with application, infrastructure, and security teams to coordinate patching and closure of vulnerabilities
• Assist in Incident Response activities by analyzing alerts, gathering evidence, supporting containment, and documenting incident outcomes
• Prepare regular reports, dashboards, and service health summaries for operational and leadership review
• Support integration of security tools with SIEM, SOAR, Azure AD, M365, ITSM, or CMDB platforms where applicable
• Provide secondary support for CrowdStrike Falcon endpoint security alerts, endpoint investigation, and coordination with endpoint or SOC teams

Requirements:

• This is a remote role based in the US
• 5 to 8 years of experience in cybersecurity operations, email security, vulnerability management, or incident response
• Hands-on experience with Proofpoint solutions such as PPS, TAP, TRAP, DLP, URL Defense, and Attachment Defense
• Working knowledge of phishing analysis, email threat campaigns, malware indicators, and malicious payload investigation
• Experience with vulnerability scanning tools such as Qualys, Tenable, Rapid7, Wiz, or similar platforms
• Understanding of CVE, CVSS, remediation prioritization, patching workflows, and risk-based vulnerability management
• Basic understanding of incident response lifecycle, alert triage, evidence collection, escalation, and documentation
• Familiarity with Microsoft 365, Exchange Online, hybrid mail environments, SMTP, DNS, TLS, and mail-flow routing
• Knowledge of SIEM/SOAR workflows and SOC operations
• Exposure to CrowdStrike Falcon, Defender, or other EDR tools
• Understanding of CIS benchmarks, OWASP, NIST, and secure configuration standards
• Certifications such as Security+, CEH, Proofpoint Certified Administrator, or equivalent cybersecurity certifications
• Good communication and documentation skills
• Ability to work with multiple technical teams and stakeholders
• Strong analytical mindset and attention to detail
• Ability to work in a fast-paced global delivery environment
• Proofpoint Email Security administration and platform support
• Vulnerability Management (Tenable or Qualys preferably)
• Incident Response
• Email threat analysis and phishing investigation
• Vulnerability remediation tracking and reporting
• CrowdStrike Falcon Endpoint Security
• Endpoint detection and response support
• Basic threat hunting and endpoint alert triage
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field
• Exposure to CrowdStrike Falcon endpoint security is preferred