Engineer - Email Security

Grant Thornton Capability Center Poland operates in information security, managing email protection platforms. The role is part of the Information Security Platform Engineering function and involves working with teams distributed across LATAM, EMEA, and North America.

• Three or more years in information technology, including at least one year in messaging administration or security operations.
• Practical experience with an email security platform or Exchange Online mail flow, quarantine, and transport rules.
• Understanding of SMTP, DNS, email authentication fundamentals, and common phishing techniques.
• Scripting ability in PowerShell or Python sufficient for automating routine queue and reporting tasks.

Nice to have:

• Certifications such as CompTIA Security+, Microsoft SC-200, or MS-203.
• Exposure to security awareness programs, phishing simulations, and incident ticketing workflows.

• Review quarantined and user-reported messages, release or remove them according to policy, and record indicators justifying each decision.
• Apply approved allow and block list changes, policy updates, and sender onboarding requests following standard change processes.
• Run message traces to resolve delivery and filtering issues and escalate cases indicating control gaps.
• Maintain SPF, DKIM, and DMARC records under senior engineer direction and monitor authentication failure reports.
• Produce recurring operational reports on volumes, catch rates, and queue performance, and update runbooks accordingly.
• Operate assigned security platforms as a service, including capacity planning, patching, upgrades, health monitoring, and vendor case management.
• Automate repetitive configuration and operational tasks, treating platform configuration as code where tooling permits.
• Support incident response and forensic investigations with expert knowledge, evidence collection, and rapid containment.
• Maintain runbooks, architecture diagrams, and control documentation meeting internal audit and external assessment standards.
• Participate in on-call rotations and scheduled change windows, including occasional work outside standard business hours.