Key Responsibilities
Automation, SOAR, & SOC Integration
SOAR Orchestration: Design, build, and optimize automated incident response playbooks within Cortex XSOAR and Torq to accelerate threat containment and reduce manual analyst overhead.
Efficiency Optimization: Develop automation workflows to improve operational efficiency, streamline alert triaging, and eliminate manual processes for both Email Security operations and the centralized SOC.
API Integration Management: Build and maintain reliable integrations linking Proofpoint, Microsoft Defender, and other security tools via APIs to ensure seamless telemetry sharing and orchestration.
Scripted Automation: Write targeted, efficient scripts in Python and PowerShell to parse email headers, query security logs, manipulate data objects, and bridge gaps between disparate security solutions.
Core Email Security Engineering
SEG Policy Management: Configure and fine-tune inbound/outbound rules within Proofpoint Enterprise Gateway to block phishing, spam, malware, and business email compromise (BEC).
Multi-Layered Threat Hunting: Monitor and tune Microsoft Defender for Office 365 in a non-inline configuration to detect, investigate, and auto-remediate malicious emails that bypass the gateway perimeter.
Email Governance: Enforce, troubleshoot, and audit domain health and brand protection configurations via SPF, DKIM, and DMARC protocols.
Incident Triage & Analysis: Investigate complex SMTP routing anomalies, resolve delivery failures, and support the SOC during high-priority email-borne campaigns.
SRE & SecRE (Reliability Engineering)
Infrastructure Reliability (SRE): Own the availability, performance, and operational health of enterprise mail routing. Build monitoring dashboards, establish alerting thresholds, and define Service Level Indicators/Objectives (SLIs/SLOs) for mail delivery.
Control Pipeline Reliability (SecRE): Treat security controls as software systems. Ensure security APIs and playbooks fail securely without dropping threat telemetry, and validate that automation rules execute without introducing false-positive cascades.
Advanced Threat Protection & Day-to-Day AI Use
AI Telemetry & Tooling Utilization: Heavily utilize and champion AI capabilities in your daily workflows to speed up engineering processes, optimize scripts, generate clear documentation, and troubleshoot logic errors.
Adaptive Risk Enforcement: Maintain and mature an active deployment of dynamic user risk assessments, leveraging Proofpoint TAP data to track Very Attacked People (VAPs). Automate the enforcement of adaptive controls to trigger Cloud-Based Browser Isolation (CBI) for high-risk web browsing and explore other protection capabilities to enhance security.
AI Threat Intelligence: Harness Proofpoint’s AI-powered classification engines (NexusAI) and Microsoft's machine learning telemetry to detect advanced identity deception and linguistic-based phishing threats.
Job Qualifications
Automation & SOAR Experience: Practical experience engineering automated workflows and playbooks within enterprise SOAR platforms, specifically Cortex XSOAR and/or Torq.
Scripting Skills: Proficiency in Python and PowerShell, with a strong focus on utilizing them for security automation, data parsing, and interacting with REST APIs.
AI Adaptability: Demonstrated experience using AI platforms or LLM-driven engineering tools to streamline technical tasks, optimize code, and accelerate daily operational delivery.
Proofpoint & Defender Architecture: Deep administration experience with Proofpoint Enterprise Gateway, TAP, and CTR/TRAP, paired with strong operational navigation of Microsoft Defender for Office 365.
SRE & SecRE Mindset: Proven experience managing system reliability, uptime, and automated incident response workflows for critical enterprise infrastructure.
Remote Browser Isolation (RBI): Practical experience deploying and managing cloud-based URL/Web isolation policies linked to specific user-risk criteria.
Messaging & Protocol Mastery: In-depth knowledge of SMTP routing, DNS infrastructure, MX records, and security headers (SPF, DKIM, DMARC).
Preferred Qualifications
Official certifications such as Proofpoint Certified Administrator/Engineer, Palo Alto Networks Certified Security Automation Engineer (PCSAE), or Microsoft Certified: Security Operations Analyst Associate (SC-200).
Scale your career with P&G
We provide avenues to scale your expertise and technological proficiency.
As an experienced hire, you are empowered to scale your impact and go beyond being a developer with opportunities to lead, guide, and collaborate on transformative projects that power our brands.
We are committed to scale your personal growth alongside the company’s success. Here’s what’s on the table:
Performance bonus (STAR program) that rewards managers in light with business results achieved.
Thrive at work and your personal life through our flexible work schedule with available work from home arrangements.
Your well-being is non-negotiable and supported by health insurance, fitness support, and an Employee Assistance Program.
Learn more about what’s in store for you at https://www.pgcareers.com/ph/en/benefits.
About us
We produce globally recognized brands and we grow the best business leaders in the industry. With a portfolio of trusted brands as diverse as ours, it is paramount our leaders are able to lead with courage the vast array of brands, categories and functions. We serve consumers around the world with one of the strongest portfolios of trusted, quality, leadership brands, including Always®, Ariel®, Gillette®, Head & Shoulders®, Herbal Essences®, Oral-B®, Pampers®, Pantene®, Tampax® and more. Our community includes operations in approximately 70 countries worldwide.
Visit http://www.pg.com to know more.
We are an equal opportunity employer and value diversity at our company. We do not discriminate against individuals on the basis of race, color, gender, age, national origin, religion, sexual orientation, gender identity or expression, marital status, citizenship, disability, HIV/AIDS status, or any other legally protected factor.
- Job Segmentation
- Experienced Professionals
