Sr Lead Security Engineer - Email

• Lead the strategy, architecture, engineering, and lifecycle management of enterprise email security platforms protecting critical business communications.
• Define and drive the roadmap for email security capabilities, including secure email gateways, phishing protection, threat detection and response, encryption, data loss prevention (DLP), and cloud-based security services.
• Serve as the technical authority for email security architecture, ensuring solutions align with cybersecurity, resiliency, regulatory, and multi-level security requirements.
• Partner with Cyber, Technology, Risk, Compliance, Audit, and business stakeholders to assess threats, prioritize investments, clarify security requirements, and manage security risk.
• Lead complex engineering and modernization initiatives from concept through deployment, including proof-of-value evaluations, migrations, technology upgrades, and platform transformations.
• Drive incident response, threat analysis, risk assessments, and remediation activities related to phishing, business email compromise (BEC), malicious campaigns, and emerging email-borne threats.
• Establish metrics, KPIs, and reporting that demonstrate platform effectiveness, threat reduction, operational performance, resiliency, and business value.
• Develop executive-level presentations, strategy papers, management updates, and governance communications for senior leadership, risk committees, and oversight forums.
• Manage vendor relationships and drive accountability for product roadmaps, operational performance, risk remediation, and contractual commitments.
• Mentor and lead engineering teams while fostering a culture of innovation, operational excellence, continuous improvement, and effective resource management during disruptive events.
• Leverage enterprise-authorized AI capabilities and reuse-first engineering practices to accelerate security analysis, testing, control validation, and documentation while ensuring data protection, auditability, and compliance.

Required Qualifications, Capabilities, and Skills

• 10+ years of cybersecurity experience, including significant experience leading enterprise email security programs and engineering teams.
• Deep expertise in email security technologies, including secure email gateways, phishing protection, threat detection, encryption, cloud email security platforms, and email authentication standards (SPF, DKIM, and DMARC).
• Proven experience designing, implementing, and operating enterprise-scale security architectures within highly regulated environments.
• Advanced knowledge of software engineering, application development, and technical disciplines such as cloud computing, artificial intelligence, machine learning, or related technologies.
• Strong experience with threat modeling, vulnerability assessments, penetration testing, risk analysis, and security control validation.
• Advanced proficiency in one or more programming or automation languages, with the ability to solve complex technical problems independently.
• Demonstrated experience leveraging enterprise-authorized AI capabilities in engineering workflows, including validating AI-assisted recommendations and maintaining awareness of data sensitivity, resiliency, and audit requirements.
• Strong understanding of cybersecurity frameworks, risk management practices, regulatory expectations, and audit requirements.
• Demonstrated ability to lead large cross-functional initiatives involving Cybersecurity, Infrastructure, Engineering, Risk, Compliance, Audit, Vendor Management, and business organizations.
• Strong executive communication skills, including experience presenting technical strategies, risks, business cases, roadmaps, metrics, investment recommendations, and program status to senior leadership.
• Exceptional leadership, influence, and problem-solving skills with the ability to build consensus, drive decisions, balance strategic priorities, and deliver measurable risk-reduction outcomes across diverse stakeholder groups.