Email Security SME

Role:  Email Security SME

Experience:

7+ Years

Location:

Noida
Notice Period:  Immediate – 15 Days Only

We are seeking a highly skilled  Email Security Subject Matter Expert (SME)  with deep expertise in  Microsoft Defender for Office 365 (MDO)  and enterprise email threat protection. The ideal candidate will lead high-severity investigations and drive proactive improvements in email security posture.

Key Responsibilities :
Lead investigation of  High & Critical Email Security Incidents  flagged by  Microsoft Defender for Office 365 (MDO)
Correlate alerts across  Microsoft Defender XDR  (Endpoint, Identity, Cloud Apps) to build full incident storylines
Utilize  Automated Investigation & Response (AIR)  playbooks to:
Soft-delete malicious emails
Remove suspicious inbox rules
Block sender domains/URLs
Perform  forensic analysis  of phishing, spoofing, and  Business Email Compromise (BEC)  attacks
Prepare  Root Cause Analysis (RCA)  and document lessons learned
Identify detection gaps and recommend improvements to  SIEM / SOAR  teams
Fine-tune  MDO policies  – Anti-Phishing, Anti-Spam, Safe Links, Safe Attachments
Collaborate with  Microsoft Premier Support  and  Microsoft DART  (when approved) for deep-dive investigations
Update and manage incident lifecycle in  Service Now  with timely stakeholder communication
Preferred Skills :
Experience participating in  CSIRT bridges  and coordinating with  Cyber Defense / Rapid Response Teams
Strong exposure to  SLA/KPI reporting  and dashboard creation
Ability to implement preventive controls from past incident learnings
Participation in  quarterly tuning sessions  and security transformation workshops