Analyst, Information Security (Seasonal)

Responsibilities

• Email Security Operations Support administration, monitoring, and tuning of Major League Baseball’s email security platforms, including Microsoft Defender for Office 365, Exchange Online Protection, ICES solutions, secure email gateways, and related tools
• Assist with phishing, BEC, spoofing, malware, impersonation, credential harvesting, and suspicious-message investigations
• Analyze email headers, message traces, authentication results, URLs, attachments, sender reputation, and related telemetry to support detection and response
• Review quarantined messages, investigate false positives and false negatives, and support allow/block and policy-tuning decisions
• Microsoft 365, ICES, and Authentication Support
• Assist with Microsoft 365 email security administration, including Defender for Office 365, Exchange Online Protection, Exchange Admin Center, Defender XDR, Threat Explorer, message trace, and related capabilities
• Support ICES platform configuration, integrations, testing, operational maintenance, and reporting
• Support SPF, DKIM, and DMARC configuration, reporting, and alignment across Major League Baseball-managed domains; exposure to BIMI and VMC is a plus
• Affiliate with third-party sender validation, mail-flow review, authentication alignment, and domain protection efforts
• Scripting, Automation, and Tooling
• Use scripting languages such as Python, PowerShell, Go, or Bash to automate repetitive email security tasks, parse data, enrich investigations, and improve reporting
• Work with Microsoft Graph, REST APIs, and security tool APIs to collect data, integrate systems, and support automation
• Affiliate with proof-of-concept testing and evaluation of new email security tools, integrations, and workflows
• Help improve operational efficiency through lightweight automation, repeatable processes, and clear documentation

Qualifications & Skills

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience
• 2+ years of experience in email security, information security, SOC operations, messaging administration, IT operations, or a related technical role
• Experience investigating suspicious emails, phishing reports, BEC attempts, spoofing, impersonation, malware delivery, or credential-harvesting activity
• Familiarity with Microsoft 365 email administration or security tools, such as Defender for Office 365, Exchange Online Protection, Exchange Admin Center, Defender XDR, message trace, or Microsoft Graph
• Familiarity with SPF, DKIM, DMARC, and common email authentication concepts
• Technical Skills
• Ability to investigate suspicious emails using headers, message traces, authentication results, URLs, attachments, sender reputation, and security telemetry
• Understanding of common email threats, including phishing, BEC, spoofing, impersonation, malware delivery, credential harvesting, domain abuse, and sender reputation issues
• Ability to write or modify scripts in at least one language, such as Python, PowerShell, Go, or Bash
• Comfort working with APIs, logs, structured data, automation workflows, and security reporting
• Familiarity with collaboration and documentation tools such as Jira, Asana, Confluence, GitHub, or similar platforms
• Ability to document technical procedures clearly and maintain accurate operational records