Email Hygiene Analyst

About the Role

SRS Acquisition is seeking an Email Hygiene Analyst / Senior Email Hygiene Analyst to join the Cybersecurity team and protect the organization against phishing, business email compromise, malware, spam, impersonation, and other email-based threats. The ideal candidate will have recent, hands-on experience with Proofpoint. Candidates must be able to clearly explain the technologies and responsibilities listed on their resume. For Senior-level consideration, candidates must demonstrate strong technical depth and independent ownership of email security operations.

Responsibilities

• Monitor and investigate alerts, quarantines, abuse mailboxes, and user-reported phishing.
• Analyze email headers, sender reputation, SPF, DKIM, DMARC, URLs, attachments, domains, and message content.
• Investigate phishing, BEC, malware, spam, spoofing, impersonation, and account takeover incidents.
• Use Proofpoint and Abnormal Security to detect, investigate, and remediate email threats.
• Search for and remove malicious messages across user mailboxes.
• Block malicious senders, domains, URLs, attachments, and other indicators of compromise.
• Tune email security policies while minimizing false positives.
• Review quarantined messages and determine appropriate release, blocking, or escalation.
• Investigate compromised accounts, suspicious forwarding rules, and unusual mailbox activity.
• Support phishing simulations, security awareness, and user education initiatives.
• Partner with SOC, IAM, Incident Response, Microsoft 365, Legal, HR, and other teams during investigations.
• Maintain SOPs, response playbooks, block/allow lists, and email security documentation.
• Track email security metrics, phishing trends, remediation activity, and emerging threats.
• Identify opportunities to automate repetitive investigation and reporting activities.
• Support email security projects, platform upgrades, policy changes, M&A activities, and new domain onboarding.
• Stay current on emerging email attack techniques and recommend security improvements.

Required Qualifications

• Strong hands-on Proofpoint experience — current/recent experience is required.
• Experience with Abnormal Security or similar email security platforms.
• Strong understanding of phishing, BEC, malware, spoofing, spam, and email-based attacks.
• Experience analyzing email headers, URLs, attachments, domains, and authentication results.
• Working knowledge of SPF, DKIM, and DMARC.
• Experience with Microsoft 365/email security environments.
• Strong analytical, investigative, documentation, and communication skills.
• Ability to confidently explain technical experience and responsibilities listed on the resume.
• US Citizen or Green Card holder only.
• Ability to work onsite in McKinney, TX 3 days per week.

Important Note

Proofpoint is the primary technology for this position, and its features and capabilities evolve frequently. Candidates who have not used Proofpoint hands-on within the recent past will not be a fit. Senior-level candidates must demonstrate Senior-level technical depth during the interview.