It's fun to work in a company where people truly BELIEVE in what they're doing!We're committed to bringing passion and customer focus to the business.The RoleYou are a Senior Cybersecurity Analyst (email borne threats) or have a strong desire and a skill set to become one!We are looking for a highly intelligent, driven person to join a dynamic group of people who are passionate about saving the world from the growing threat of e-mail borne threats: phishing, malware, BEC and spam. We are competing against a very active, creative, and motivated adversary who was credited as sending over 40 trillion spam messages last year alone! If you are interested in helping us achieve our goal and rid the world of phishing, malware and spam, we definitely would like to speak with you. We offer a challenging environment that fosters creativity and rewards excellence. Your day to day Member of a creative, enthusiastic, and geographically distributed team (in a 24/7/365 "follow the sun" model) that is responsible for identifying, parameterizing, and responding quickly to spam attacks levied against some of the world's largest organizations.Analyze email messages reported by customers as well as work on large data sets in order to determine correct classification (spam, phishing, malware, BEC (Advanced Email Fraud), bulk, ham).CONTENT DEVELOPMENT - Perform deep analyses of spam message headers & structures to identify novel spam features, and design various rules/signatures to detect those features and block email borne threats.Ad-hoc development of tools as necessary to aid/streamline analysis activities.As an Email Cybersecurity analyst, who has coding experience and skills - an opportunity to design and develop new PoCs threat detection system(s) based on your expertise or learn how to add this skill to your toolset.Continue to develop and support existing Threat Detection PoCs based on the existing Threat Detection framework.Developing and maintaining Python applications/tools, writing clean and efficient code, debugging and troubleshooting issues, collaborating with cross-functional teams, and participating in code reviews. Knowledge of database systems.Be available in an rotating on-call basis to respond to develop signatures, that detect and block an emerging or an ongoing threat(s)Provide responses and explanations to customers in a positive, professional manner if neededHelp us define the landscape, prevalence, and evolution of messaging abuse, threats, and attacks by participating in future requirements definition discussions of our products.What you bring to the teamKnowledge of different types of email borne attack vectors, tools and tactics In-depth knowledge of email borne threats: phishing, malware, BEC and spam. Ability to find and research suspicious patterns in URLs, domains, in conjunction with overall email structure (email headers and email context). Ability to create detection signatures/rules (content development) based on observed suspicious patterns with experience of 2-4 or more years in the field. General curiosity about the headers and structure of email messages. General familiarity with how mail delivery works, knowledge of email security standards and protocols, such as SPF, DKIM, and DMARC, would be beneficial.Practical knowledge (hands-on experience) with Regular Expressions Minimum 2+ years hands-on experience with Python or a different programming languageExperience in one of Python frameworks (Django, Flask or Pandas)Experience with data analysis, familiarity with cybersecurity best practices, and the ability to work with large datasets.Familiarity with Unix environments and comfort with a range of Unix command line tools for manipulating and extracting content from text files is a must haveFamiliarity and/or experience with LUA based detection signatures is a plusFamiliarity and/or experience with ClamAV based detection signatures is a plusWillingness to play an important technical roleDemonstrated analytical and creative problem-solving abilities. Ability to work independently yet fully integrate with worldwide, remote teams. Can-do attitude with a focus on problem solving, product quality, and a strong desire to get the job done. Requirements/Education and/or Equivalent Experience (including technical and non-technical capabilities) BSCS or equivalent, or equivalent technical experience. Why ProofpointProtecting people is at the heart of our award-winning lineup of cybersecurity solutions, and the people who work here are the key to our success. We’re a customer-focused and a driven-to-win organization with leading-edge products. We are an inclusive, diverse, multinational company that believes in culture fit, but more importantly ‘culture-add’, and we strongly encourage people from all walks of life to apply. We believe in hiring the best and the brightest to help cultivate our culture of collaboration and appreciation. Apply today and explore your future at Proofpoint! #LifeAtPFPTIf you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!#LI-PC1If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!
View Original Job Posting