Security Architect Email

Job Description

We are seeking a Product Security Engineer / Architect – Email Security reporting into the Defensive Engineering leadership team within Global Cyber Security (GCS). You will lead the strategy, architecture, and engineering of enterprise email security capabilities, protecting the organization against phishing, business email compromise (BEC), account takeover, malware, and emerging threats. The team you will be joining is part of Defensive Engineering within Global Cyber Security, a function that is critical to the company’s cybersecurity strategy. Email remains one of the primary attack vectors used by threat actors to target organizations. This role will help drive the technologies, controls, and security capabilities needed to protect the firm’s communication channels and reduce cyber risk.

rAs a Product Security Engineer / Architect – Email Securit y, you will
:Lead the evaluation, implementation, and continuous improvement of email security technologies and controls
.Partner with the Email Platform tea m, which owns and operates the enterprise email infrastructure, to design and deploy security capabilities across the email ecosystem
.Collaborate with the Cyber Defense Center (CDC ) to enhance detection, investigation, and response capabilities for phishing, business email compromise (BEC), account takeover, and other email-borne threats
.Work with Threat Intelligence, Identity Security, and Incident Response teams to identify emerging threats and improve defensive controls
.Drive integration of email security solutions with security monitoring, analytics, and response platforms
.Develop security standards, architectural patterns, and implementation guidance for email security controls
.Track and report key metrics related to email threat protection, phishing resilience, and risk reduction
.eThese skills will help you succeed in this role
:Experience with enterprise email security technologies such as Microsoft Defender for Office 365, Proofpoint, Abnormal Security, Mimecast, Cisco Secure Email, or similar platform s
.Strong understanding of phishing, business email compromise (BEC), account takeover, malware, social engineering, and email-based threats
.Experience integrating email security platforms with SIEM, SOAR, identity, endpoint, and threat intelligence solutions
.sBachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience
.8+ years of experience in cybersecurity, security engineering, or security architecture
.Experience working in financial services or other regulated industries preferred
.Relevant certifications such as CISSP, CCSP, GIAC, or Microsoft Security certifications preferred
.Familiarity with emerging AI-driven phishing, impersonation, and social engineering threats
.Strong collaboration skills and ability to work across Cyber Security, GTS, and Engineering organizations
.Ability to translate security risks into actionable technical solutions
.tHybrid work model in accordance with company policy
.