Associate Threat Response Analyst

Associate Threat Response Analyst Threat Response Operations As a Threat Response Analyst, you will be joining the Mimecast Threat Response Operations team and will be responsible for supporting on-demand threat resolution for our customers. The service is designed to provide customers with prompt feedback and intelligence on email-borne threats, remediate these threats from their email environment to reduce dwell time, and put the appropriate detections in place to prevent further incidents from occurring. The role may require working afternoon/evening shifts and being part of a rotation for holiday support. Threat Response team ensures that our security-focused solutions are performing accurately and efficiently, thereby keeping our customers safe amidst a rapidly evolving threat landscape. Through threat research and customer feedback we identify where our security products can be improved for better detection of security threats. Threat Response works closely with research and development, as well as customer support. We are a global team that spans three continents. What You ll Do Analyze phishing/malicious email campaigns to identify IOCs Categorize email threats and determine the optimal methods to update detection Provide email security advice, expertise, and remediation to our customers Understand security policies within the Mimecast Administration Console and provide configuration suggestions to customers Research and investigate the latest security threats and their potential impact on Mimecast customers Work with security vendors on threat detection techniques and remediation Identify opportunities to improve processes and systems What You ll Bring: Experience and understanding of email security technologies: SPF, DKIM, DMARC Strong understanding of SMTP, SSL/TLS, POP3, IMAP, TCP/IP Working knowledge of messaging (email traffic management) and routing Strong understanding of Domain Name System (DNS) Strong understanding of URL structure, including components like protocols, domains, subdomains, paths, and query parameters Experience working with email/malware detection and blocking techniques Experience working with threat intelligence platforms Ability to translate complex technical capabilities into customer-friendly responses Curiosity about the infrastructure of phishing/malicious email campaigns Working within SaaS environments Nice to have: Experience working in a Security Operations Centre (SOC) Experience with Mimecast products as an administrator. Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.