Response Engineer, PhishGuard

What you'll do

• Conduct real-time monitoring of email threat queues to analyze sophisticated attacks flagged by automated systems.
• Investigate customer-reported submissions and execute proactive threat hunts to identify emerging patterns and mitigate risks.
• Provide critical feedback to Detection Engineering for updating machine learning models and enhancing global intelligence repositories.
• Identify nuanced threat patterns by correlating technical telemetry with behavioral indicators, generating detailed threat dossiers.
• Deliver direct crisis intervention and proactive phone notifications to customers regarding high-dollar BEC threats and insider risks.
• Lead technical onboarding sessions for new customers, configuring internal system instances with bespoke detection rules and custom lists.

What we're looking for

• 5+ years of experience tracking and analyzing complex cyber campaigns using technical indicators like domains, IP addresses, and email headers.
• Proven expertise in analyzing, investigating, and defending against targeted phishing, invoice fraud, and Business Email Compromise (BEC) attacks.
• Deep knowledge of core email authentication protocols including SPF, DKIM, and DMARC.
• Hands-on experience with AI LLM tools for developing automations in daily analysis and productivity workflows.
• Strong ability to communicate complex technical threats effectively to executive stakeholders in both verbal and written English.
• Undergraduate degree in Computer Science, Information Security, or related field, or equivalent practical experience.