Messaging Security Analyst II needed at Mimecast

What You’ll Do

• Proactively identify and dissect email-borne threats, including phishing, BEC, malware, and spam campaigns.
• Act as an escalation point for analysts, providing guidance and support for complex cases.
• Perform deeper analysis of threat actor tactics, techniques, and procedures (TTPs) to identify patterns and improve detection efficacy.
• Assist in the development and refinement of detection rules, filters, and automation workflows to enhance threat identification and response.
• Monitor email threat feeds, identify and respond to events.
• Maintain awareness of the evolving threat landscape, sharing insights and findings with the team to improve collective knowledge.
• Query and analyse large datasets to identify threat scope and indicators of compromise.
• Contribute to the creation and maintenance of documentation, playbooks, and standard operating procedures for threat detection and response.
• Participate in threat hunting activities to proactively identify and mitigate emerging threats.
• Collaborate with team members both in-office and remotely to investigate threats and improve detection efficacy.
• Participate in cross-functional projects with Product, Engineering, and Operations teams to improve Mimecast’s security posture.

What You’ll Bring

• Expertise in threat data classification, with demonstrated expertise in investigated and responding to email-based threats.
• Experience in a SOC or email detection/filtering engines.
• Knowledge of email threats and their TTPs, and strong curiosity about the infrastructure of phishing/malicious email campaigns.
• Understanding of email protocols (SMTP, DKIM, SPF, DMARC).
• Experience with querying and analysing large datasets
• Excellent time management and ability to self-prioritize in a fast-paced environment.
• Able to collaborate effectively both in-office and remotely; strong written and verbal communication skills.
• Eagerness to learn, adapt, and share knowledge with others.