高级SOC工程师
Senior SOC Engineer
关于公司：
Proofpoint 是人类和代理中心网络安全的全球领导者。我们保护人们、数据和 AI 代理通过电子邮件、云和协作工具的连接方式。超过 80 家财富 100 强企业、10,000 家大型企业和数百万家小型组织信任 Proofpoint 来阻止威胁、防止数据泄露，并在他们的人员和 AI 工作流程中建立韧性。我们的使命很简单：保护数字世界，赋予人们安全且自信地工作的能力。加入我们，共同致力于保护数据和保障人们的安全。
我们的工作方式：
在 Proofpoint，您将加入一个打破界限、重新定义网络安全的全球团队，我们以 BRAVE 核心价值观为指导：
大胆地梦想和创新
对反馈、挑战和机遇做出响应
对结果和最佳成果负责
以未来为导向的问题解决
执行和影响卓越
职位描述
在这个职位上，我们正在寻找一位聪明、热情的人加入我们的安全运营中心（SOC）团队。SOC 团队负责我们产品的日常准确性，监控客户数据中的新威胁，并在威胁发生时迅速反应。该团队采用随日而动的模式，与工程、支持和技术服务团队紧密合作，这些团队高度重视与 SOC 的紧密合作关系。
作为该团队的一员，您将与一些最大的互联网服务提供商和移动运营商合作，确保最高级别的威胁检测、分析和高质量响应。SOC 中的每一天都不相同，您需要应对攻击并进行更广泛的数据研究。我们寻找那些不仅看到一封邮件或一条短信，而是能发现模式或反滥用行为，并理解我们的产品如何看到这些信息的人。我们寻找具有好奇心的人，找到改进我们产品的方法，以快速检测和阻止威胁。
您将负责的工作包括：
- 参与监测和调整检测系统，以应对新出现的威胁
- 使用最佳实践开发创新的自动化工具，以提高我们对新出现威胁的韧性
- 与我们的工程、支持、威胁运营和技术服务团队密切合作，为客户提供多方面的有效解决方案
- 记录威胁和趋势，用于内部和外部沟通
- 为提交 CSI 修复请求的用户提供支持
查看英文原文
About Us:
Proofpoint is a global leader in human- and agent-centric cybersecurity. We protect how people, data, and AI agents connect across email, cloud, and collaboration tools. Over 80 of the Fortune 100, 10,000 large enterprises, and millions of smaller organizations trust Proofpoint to stop threats, prevent data loss, and build resilience across their people and AI workflows. Our mission is simple: safeguard the digital world and empower people to work securely and confidently. Join us in our pursuit to defend data and protect people.
How We Work:
At Proofpoint you’ll be part of a global team that breaks barriers to redefine cybersecurity guided by our BRAVE core values:
Bold in how we dream and innovate
Responsive to feedback, challenges and opportunities
Accountable for results and best in class outcomes
Visionary in future focused problem-solving
Exceptional in execution and impact
The Role
In this role, we are looking for an intelligent, passionate person to join our Security Operations Center (SOC) team. The SOC team is responsible for the day-to-day accuracy of our products, monitoring customer data for new threats and reacting quickly when such threats occur. The team uses a follow-the sun-model and works closely with the Engineering, Support and Technical Services teams who highly value a close working relationship with the SOC.
As a member of this team, you will be working with some of the largest Internet Service Providers and Mobile Operators to ensure the highest level of threat detection, analysis and high-quality response. No two days are alike within the SOC as you react to attacks and work on broader research into our data. We’re looking for people who don’t just see an email or text message but instead see patterns or anti-abusive behavior and understand how our products see those messages. We’re looking for people with a curious mind to find ways to improve our products to detect and stop threats quickly.
What you'll do
- Participate in the monitoring and adjustment of detection systems for new and emerging threats
- Use best practices to develop innovative automation and tooling that can improve our resilience to new and emerging threats
- Work closely with our Engineering, Support, Threat Operations and Technical Services teams to provide customers with a multi-pronged approach to efficacy
- Document threats and trends for internal and external communication
- Provide support for users submitting CSI remediation requests
- Operate within a 24x7 follow-the-sun environment (no
What we're looking for
- 5 years experience within the anti-abuse email deliverability, threat or other security research fields
- Demonstrates strong analytical and creative problem-solving abilities
- Good understanding of the Internet and how malicious actors use available resources
- Strong technical experience with email, mobile, DNS or other messaging technologies
- Proficiency in Shell & Go preferred, Perl and Python are ok
- Strong communication skills both verbally and in writing in English,
- Document and report findings to the team
- Good knowledge of using SIEM tools such as Splunk or Kibana
- Familiarity with SQL
Nice to have
- Previous Internet Service Provider, Email Service Provider or Mobile Operator experience
- Familiarity writing regular (regex) expressions
- Understanding of operating systems and network protocol
- Proficiency in a non-English language
Why Proofpoint?
At Proofpoint, we believe that an exceptional career experience includes a comprehensive compensation and benefits package. Here are just a few reasons you’ll love working with us:
- Competitive compensation
- Comprehensive benefits
- Career success on your terms
- Flexible work environment
- Annual wellness and community outreach days
- Always on recognition for your contributions
- Global collaboration and networking opportunities
Our Culture:
Our culture is rooted in values that inspire belonging, empower purpose and drive success-every day, for everyone.
We encourage applications from individuals of all backgrounds, experiences, and perspectives. If you need accommodation during the application or interview process, please reach out to .
How to Apply
Interested? Submit your application along with any supporting information- we can’t wait to hear from you!
Originally posted on Himalayas