Email Security and Site Reliability Engineer

Job Location

Job Description

At P&G, your career is built to scale with our iconic brands like Ariel®, Safeguard ®, Tide ®, Head & Shoulders®, Old Spice®, and Vicks®.

Ready to join the team that powers our iconic brands? Here’s what you’ll be doing:

We are seeking aSenior Email Security & Reliability Engineer to comprehensively own our global messaging defense platform. This role perfectly balancesCore Security Engineering (designing mail flows, tuning policies, and stopping threats) withReliability Engineering—specificallySite Reliability Engineering (SRE) to ensure the uptime of our mail routing, andSecurity Reliability Engineering (SecRE) to guarantee our detection pipelines and automated response systems operate flawlessly.

A heavy focus of this position is driving low-code/no-code playbook automation and orchestration to maximize operational efficiency for both the Email Security and broader Security Operations Center (SOC) teams. You will maintain our multi-layered stack—centered aroundProofpoint (inline) andMicrosoft Defender for Office 365 (non-inline post-delivery)—while scaling an active automation framework that leverages dynamic user risk assessments to trigger cloud-based browser isolation for our most targeted users.

Job Overview

This role requires a unique mix of messaging security expertise, automation scripting, and reliability engineering. While this is not a pure software development role, you will heavily utilizePython andPowerShell to build integrations, automate repetitive workflows, and orchestrate responses using modern SOAR platforms. The role also expects the heavy integration and use ofArtificial Intelligence (AI) tools in day-to-day work—ranging from maximizing AI-driven security telemetry to utilizing AI capabilities to accelerate engineering, documentation, and troubleshooting tasks. Your goal is to ensure mail routing never drops, security controls fail-securely, and the SOC benefits from high-fidelity, automated email threat containment.

Key Responsibilities

Automation, SOAR, & SOC Integration

• SOAR Orchestration: Design, build, and optimize automated incident response playbooks withinCortex XSOAR andTorq to accelerate threat containment and reduce manual analyst overhead.
• Efficiency Optimization: Develop automation workflows to improve operational efficiency, streamline alert triaging, and eliminate manual processes for both Email Security operations and the centralized SOC.
• API Integration Management: Build and maintain reliable integrations linking Proofpoint, Microsoft Defender, and other security tools via APIs to ensure seamless telemetry sharing and orchestration.
• Scripted Automation: Write targeted, efficient scripts inPython andPowerShell to parse email headers, query security logs, manipulate data objects, and bridge gaps between disparate security solutions.

Core Email Security Engineering

• SEG Policy Management: Configure and fine-tune inbound/outbound rules withinProofpoint Enterprise Gateway to block phishing, spam, malware, and business email compromise (BEC).
• Multi-Layered Threat Hunting: Monitor and tuneMicrosoft Defender for Office 365 in a non-inline configuration to detect, investigate, and auto-remediate malicious emails that bypass the gateway perimeter.
• Email Governance: Enforce, troubleshoot, and audit domain health and brand protection configurations viaSPF, DKIM, and DMARC protocols.
• Incident Triage & Analysis: Investigate complex SMTP routing anomalies, resolve delivery failures, and support the SOC during high-priority email-borne campaigns.

SRE & SecRE (Reliability Engineering)

• Infrastructure Reliability (SRE): Own the availability, performance, and operational health of enterprise mail routing. Build monitoring dashboards, establish alerting thresholds, and define Service Level Indicators/Objectives (SLIs/SLOs) for mail delivery.
• Control Pipeline Reliability (SecRE): Treat security controls as software systems. Ensure security APIs and playbooks fail securely without dropping threat telemetry, and validate that automation rules execute without introducing false-positive cascades.

Advanced Threat Protection & Day-to-Day AI Use

• AI Telemetry & Tooling Utilization: Heavily utilize and championAI capabilities in your daily workflows to speed up engineering processes, optimize scripts, generate clear documentation, and troubleshoot logic errors.
• Adaptive Risk Enforcement: Maintain and mature an active deployment of dynamic user risk assessments, leveraging Proofpoint TAP data to track Very Attacked People (VAPs). Automate the enforcement of adaptive controls to triggerCloud-Based Browser Isolation (CBI) for high-risk web browsing and explore other protection capabilities to enhance security.
• AI Threat Intelligence: Harness Proofpoint’s AI-powered classification engines (NexusAI) and Microsoft's machine learning telemetry to detect advanced identity deception and linguistic-based phishing threats. 

Job Qualifications

• Automation & SOAR Experience: Practical experience engineering automated workflows and playbooks within enterprise SOAR platforms, specificallyCortex XSOAR and/orTorq.
• Scripting Skills: Proficiency inPython andPowerShell, with a strong focus on utilizing them for security automation, data parsing, and interacting with REST APIs.
• AI Adaptability: Demonstrated experience using AI platforms or LLM-driven engineering tools to streamline technical tasks, optimize code, and accelerate daily operational delivery.
• Proofpoint & Defender Architecture: Deep administration experience withProofpoint Enterprise Gateway,TAP, andCTR/TRAP, paired with strong operational navigation ofMicrosoft Defender for Office 365.
• SRE & SecRE Mindset: Proven experience managing system reliability, uptime, and automated incident response workflows for critical enterprise infrastructure.
• Remote Browser Isolation (RBI): Practical experience deploying and managing cloud-based URL/Web isolation policies linked to specific user-risk criteria.
• Messaging & Protocol Mastery: In-depth knowledge of SMTP routing, DNS infrastructure, MX records, and security headers (SPF, DKIM, DMARC).

Preferred Qualifications

• Official certifications such asProofpoint Certified Administrator/Engineer,Palo Alto Networks Certified Security Automation Engineer (PCSAE), or Microsoft Certified: Security Operations Analyst Associate (SC-200).

Scale your career with P&G

We provide avenues toscale your expertise and technological proficiency.

As an experienced hire, you are empowered toscale your impact and go beyond being a developer with opportunities to lead, guide, and collaborate on transformative projects that power our brands.

We are committed toscale your personal growth alongside the company’s success. Here’s what’s on the table:

• Performance bonus (STAR program) that rewards managers in light with business results achieved.
• Thrive at work and your personal life through ourflexible work schedule with availablework from home arrangements.
• Your well-being is non-negotiable and supported by health insurance, fitness support, and an Employee Assistance Program.

Learn more about what’s in store for you athttps://www.pgcareers.com/ph/en/benefits.

About us

We produce globally recognized brands and we grow the best business leaders in the industry. With a portfolio of trusted brands as diverse as ours, it is paramount our leaders are able to lead with courage the vast array of brands, categories and functions. We serve consumers around the world with one of the strongest portfolios of trusted, quality, leadership brands, including Always®, Ariel®, Gillette®, Head & Shoulders®, Herbal Essences®, Oral-B®, Pampers®, Pantene®, Tampax® and more. Our community includes operations in approximately 70 countries worldwide.

Visit http://www.pg.com to know more.

We are an equal opportunity employer and value diversity at our company. We do not discriminate against individuals on the basis of race, color, gender, age, national origin, religion, sexual orientation, gender identity or expression, marital status, citizenship, disability, HIV/AIDS status, or any other legally protected factor.

Job Schedule

Job Number

Job Segmentation