[Hiring] Senior SOC Engineer @Proofpoint

Role Description

In this role, we are looking for an intelligent, passionate person to join our Security Operations Center (SOC) team. The SOC team is responsible for the day-to-day accuracy of our products, monitoring customer data for new threats and reacting quickly when such threats occur. The team uses a follow-the-sun model and works closely with the Engineering, Support, and Technical Services teams who highly value a close working relationship with the SOC.

As a member of this team, you will be working with some of the largest Internet Service Providers and Mobile Operators to ensure the highest level of threat detection, analysis, and high-quality response. No two days are alike within the SOC as you react to attacks and work on broader research into our data. We’re looking for people who don’t just see an email or text message but instead see patterns or anti-abusive behavior and understand how our products see those messages. We’re looking for people with a curious mind to find ways to improve our products to detect and stop threats quickly.

• Participate in the monitoring and adjustment of detection systems for new and emerging threats
• Use best practices to develop innovative automation and tooling that can improve our resilience to new and emerging threats
• Work closely with our Engineering, Support, Threat Operations, and Technical Services teams to provide customers with a multi-pronged approach to efficacy
• Document threats and trends for internal and external communication
• Provide support for users submitting CSI remediation requests
• Operate within a 24x7 follow-the-sun environment

Qualifications

• 5 years experience within the anti-abuse email deliverability, threat, or other security research fields
• Demonstrates strong analytical and creative problem-solving abilities
• Good understanding of the Internet and how malicious actors use available resources
• Strong technical experience with email, mobile, DNS, or other messaging technologies
• Proficiency in Shell & Go preferred; Perl and Python are acceptable
• Strong communication skills both verbally and in writing in English
• Document and report findings to the team
• Good knowledge of using SIEM tools such as Splunk or Kibana
• Familiarity with SQL

Requirements

• Previous Internet Service Provider, Email Service Provider, or Mobile Operator experience (nice to have)
• Familiarity writing regular (regex) expressions (nice to have)
• Understanding of operating systems and network protocol (nice to have)
• Proficiency in a non-English language (nice to have)

Benefits

• Competitive compensation
• Comprehensive benefits
• Career success on your terms
• Flexible work environment
• Annual wellness and community outreach days
• Always on recognition for your contributions
• Global collaboration and networking opportunities