Email Security Operations Analyst

About the role

Sutherland is hiring an Email Security Operations Analyst in Taguig on a full-time basis. The role supports email operations, spam and abuse detection, and Trust & Safety workflows so that the email ecosystem remains secure, reliable and high quality. It is a 24x7 operation.

Key responsibilities

• Monitor and investigate inbound and outbound email traffic for spam, phishing, spoofing and abuse patterns.
• Analyze logs with Splunk to spot anomalies, suspicious behaviour and emerging threats.
• Carry out mitigation actions such as blocking, quarantining and escalation following defined SOPs.
• Validate email authentication protocols (SPF, DKIM, DMARC) and flag discrepancies.
• Support incident response by documenting findings, keeping audit trails and escalating critical risks.
• Follow SLAs, quality benchmarks and compliance standards in a 24x7 environment.
• Work with internal teams and external vendors to resolve issues and track trends.

Required profile

• 2+ years of experience in email operations, Trust & Safety or SOC environments.
• At least 18 months of tenure.
• PDP score of Exceeds Expectations or Outstanding.
• No active disciplinary action.
• Willingness to work onsite in Taguig.

Required skills

• Working knowledge of SMTP, SPF, DKIM, DMARC and email delivery infrastructure.
• Experience with Splunk SIEM and email security tools such as Microsoft 365 Defender and Proofpoint.
• Hands-on Splunk log analysis.
• Strong analytical, investigative and problem-solving skills.