About the role
As a Tuning Engineer, your role is to serve as a subject matter expert in one or more technical domains. You will be responsible for bridging the gap between the security engineering division and the various operational teams within the organization, including SOC and IT. Your primary focus will be on maintaining our global security configuration standards by leveraging your extensive operational understanding and specialized expertise in our security tools. You will keep track of product roadmaps, work closely with vendors, test new features in our lab, understand the impact of configuration changes to our IT environment and actively support operational teams with increasing coverage and effectiveness of our tools. You will combine proactive, planned engagement with reactive support at time of incidents and feedback the lessons learned as input to the next revision of our configuration standards.
This role is for a tuning engineer specialized in email security responsible for the maintenance and improvement of the baseline configurations for our commercial SAAS based email filtering platform.
[Responsibilities and Duties]:
· Support in defining best practices and DeFacto baseline configurations for our email security platform used by most Sony group companies.
· Understand the ins and outs of email security at large, how email security is approached within Sony and the extent our email security platform is serving the needs of IT and security stakeholders. Identify issues affecting coverage, effectiveness, and standardization.
· Optimize our toolset and baseline configuration by striking a delicate balance between security and operational requirements.
· Support incident prevention and response by translating TTP and IOC information into relevant, timely configuration changes.
· Work closely with security validation teams to identify gaps in our email security toolset. Propose modifications to our configuration standards based on this input.
· Work closely with all operational teams, both within security and in IT.
· Take part in the internal and business change management processes covering IT and security infrastructure.
· Work with vendors to ensure our security controls provide coverage for attacks both holistically and on a tool-per-tool basis, following a defence in depth approach.
· Closely follow commercial tool roadmaps, understand impact of new features, keep stakeholders informed, test applicability for our IT estate and push relevant changes towards completion.
· Design and execute lab tests to reproduce operational scenarios and propose improvements to the effectiveness of our configuration standards.
· Partake in product reviews by injecting operational context and experience into the requirements setting and actual review process.
· Support the SOC during incidents to provide root cause analysis and subject matter expertise regarding tool detection and prevention.
Any Degree
[Keywords]
SMTP, SPF, DKIM, DMARC, Phishing, BIMI, Proofpoint, EOP, Email Security