Manager, Email Security Engineering

Description

The Global Cyber Defense team protects the company's digital assets and infrastructure by detecting threats early, responding quickly and reducing risk across on-premises, cloud and hybrid systems.

This manager role leads engineering for email security across enterprise email, collaboration and messaging, which are key threat channels. In pharma, email is a main route for phishing, business email compromise, malware and account takeover.

You will set direction for controls that stop, spot and respond to email-borne threats across research, clinical, manufacturing and corporate environments worldwide, keeping them scalable and compliant.

The company is applying new data, modelling and automation to drug discovery and development, with the goal of better health outcomes.

Responsibilities

• Lead engineering work on email security across email, collaboration and messaging tools, including secure gateways, cloud email protection, anti-phishing, anti-malware and domain protection.
• Set the email security strategy and roadmap so it keeps pace with new threats, business goals and regulatory demands.
• Own the lifecycle of email security tools, covering deployment, configuration, policy tuning, automation, integrations, performance and ongoing improvement.
• Build layered preventive and detective defenses against phishing, business email compromise, dangerous attachments and links, spoofing, impersonation and account takeover.
• Feed email and messaging telemetry into SIEM, SOAR, identity, threat intelligence and incident response processes.
• Work with Cyber Defense, Identity, Messaging, Collaboration, Legal, Compliance and IT to reduce risk and coordinate responses to email incidents.
• Create and enforce email security standards aligned with the NIST Cybersecurity Framework, corporate policy and compliance requirements.
• Grow a high-performing engineering team, holding people accountable for technical quality, global service reliability and measurable security results.

Requirements

• Bachelor's degree in Information Security, Computer Science, Engineering or a related field, or equivalent hands-on experience.
• 4+ years in cybersecurity, with proven depth in email, messaging, collaboration or cloud security engineering.
• Hands-on work with enterprise email security tools such as Microsoft 365 or Exchange Online Protection, secure email gateways, anti-phishing and anti-malware products, URL and attachment analysis, and SPF, DKIM and DMARC.
• Experience designing, running and scaling email security controls in large, complex, highly regulated global environments.
• Ability to explain technical risk, threat trends and control effectiveness in business terms to senior leaders.
• Experience working in agile teams, with a collaborative approach, comfort with change and a proactive way of solving problems.
• Preferred: experience in the pharmaceutical, biotech or life sciences industry.
• Preferred: experience protecting high-risk users from targeted phishing, impersonation, business email compromise and account takeover.
• Preferred: professional certifications such as CISSP, CISM, CCSP or similar.
• Preferred: strong analytical, communication and stakeholder management skills, with the ability to influence technical and non-technical audiences.

Conditions

The company aims for a trusting, flexible workplace culture that supports work-life harmony and lets people do their best work.