Email Security & Insider Threat Engineer - Riyadh,KSA

The Email Security & Insider Threat Engineer is responsible for protecting the organization against phishing, business email compromise (BEC), malware campaigns, and insiderdriven threats.

Key Responsibilities

• Monitor and manage email security platforms to detect phishing, BEC, and malware attacks.

• Investigate quarantined and user-reported emails and take remediation actions.

• Fine-tune email filtering, sandboxing, and DLP policies to improve detection accuracy.

• Implement VIP and executive protection controls against targeted attacks.

• Support insider threat investigations related to email and data misuse.

• Deliver monthly email threat intelligence and trend reports.

• Collaborate with SOC and Threat Intelligence teams to improve detection and response.

Requirements

4+ years of experience in email security and threat detection.

• Hands-on experience with Proofpoint and Email DLP solutions.

• Strong understanding of phishing, BEC, and malware attack techniques.

• Experience tuning detection rules and reducing false positives.

• Familiarity with SOC workflows and incident response processes.

• Strong analytical and reporting skills.