Wybierz usługę po lewej lub skontaktuj się z nami mailowo!
What you'll be responsible for:
The Engineer for Email Security runs the daily operation of the email protection platforms. The role works the quarantine and user-reported phishing queues, applies approved policy and block changes, and keeps mail flow and authentication records accurate. It is the natural entry point into the email security team for an engineer with messaging or service desk experience who wants to specialize in security.
Key Responsibilities
-
Review quarantined and user-reported messages, release or remove them according to policy, and record the indicators that justify each decision.
-
Apply approved allow and block list changes, policy updates, and sender onboarding requests through the standard change process.
-
Run message traces to resolve delivery and filtering questions raised by the business, and escalate cases that indicate a control gap.
-
Maintain SPF, DKIM, and DMARC records under the direction of the senior engineer, and monitor aggregate reports for authentication failures.
-
Produce recurring operational reporting on volumes, catch rates, and queue performance, and keep runbooks current.
Working Arrangements and Team Expectations
This role sits within the Information Security Platform Engineering function and shares a common operating model with the wider team. Engineers own the security platforms they build end to end: design, deployment, day-to-day operation, tuning, and lifecycle management. Work is delivered against agreed service levels and measured on control coverage, platform availability, and the quality of detection and prevention outcomes. Because the teams are distributed across LATAM, EMEA, and North America, all roles require reliable overlap with United States business hours and fluent written and spoken English.
-
Operate assigned security platforms as a service, including capacity planning, patching, upgrades, health monitoring, and vendor case management.
-
Automate repetitive configuration and operational tasks, and treat platform configuration as code wherever the tooling supports it.
-
Support incident response and forensic investigations with platform expertise, evidence, and rapid containment actions.
-
Maintain runbooks, architecture diagrams, and control documentation to a standard that satisfies internal audit and external assessment.
-
Participate in an on-call rotation and in scheduled change windows, including occasional work outside standard business hours.
Our expectations:
Required Qualifications
-
Three or more years in information technology, including at least one year in messaging administration or security operations.
-
Practical experience with an email security platform or with Exchange Online mail flow, quarantine, and transport rules.
-
Understanding of SMTP, DNS, and email authentication fundamentals, and of common phishing techniques.
-
Scripting ability in PowerShell or Python sufficient to automate routine queue and reporting tasks.
Preferred Qualifications
-
Certification such as CompTIA Security+, Microsoft SC-200, or MS-203.
-
Exposure to security awareness programs, phishing simulations, and incident ticketing workflows.
What we offer:
- Hybrid working model (2 days in the office and 3 days working remotely)
- Stable employment with an employment contract, private medical care, and a benefits package including MultiSport and a benefits platform
- Opportunity to work in an international environment and collaborate with experienced Grant Thornton experts and professionals from around the world
- A culture based on teamwork, trust, and knowledge sharing
- A well-structured onboarding program to support a smooth start and successful integration into your new role
- Clear career development paths and access to learning and certification programs
- Access to training platforms and tools that support professional growth
- An inclusive workplace that welcomes people with disabilities
- A modern office in Poznań, located in Malta Office Park
Jak przebiega rekrutacja?
-
Wybierz interesującą Cię ofertęZnajdź stanowisko, które Cię interesuje, na liście poszukiwanych przez nas profili:
-
ZaaplikujWyślij swoje CV w języku polskim w odpowiedzi na interesującą Cię ofertę.
-
Daj się poznać!Jeżeli pasujesz do profilu osoby, której poszukujemy, zaprosimy Cię na spotkanie online. W rozmowie weźmie udział rekruter oraz Twój przyszły menedżer. Porozmawiamy o Twoich dotyczasowych doświadczeniach i obecnej sytuacji zawodowej, a także o aspiracjach na przyszłość. Spodziewaj się pytań z obszarów merytorycznych, a jeśli stanowisko tego wymaga – to również krótkiej rozmowy po angielsku.
-
Wypatruj odpowiedziJeśli wszystko poszło dobrze, otrzymasz od nas ofertę współpracy. Jeśli nie – powiemy, co miało wpływ na naszą decyzję.
-
Witamy na pokładzie!Ustalimy dogodny dla obu stron termin i formę rozpoczęcia współpracy.
-
Is it possible to work remotely?We work in a hybrid model that combines the flexibility of remote work with the benefits of in-person collaboration. Regular presence in our Poznań office is important to us, typically 2-3 days per week. For more details about the working model, feel free to ask during the recruitment process.
-
What is the dress code at Grant Thornton?We ask that you follow specific guidelines depending on the business situation. When working independently—and provided there are no scheduled meetings with clients or business partners—a casual dress code applies; you can wear whatever is comfortable, such as a T-shirt, jeans, or a casual shirt. After all, hardly anyone sits at home in a suit and tie or a formal business suit unless they have to. However, if meetings are scheduled, your attire should be more formal and appropriate for the client. You will certainly receive detailed information about these guidelines before you start at GT, so you know what to expect.
-
Will I always receive feedback after a job interview?We always get back to candidates with feedback—regardless of the recruitment outcome—within a maximum of two weeks following the interview. This contact may be via phone or email. We also inform candidates if the recruitment process takes longer than expected. We strive to ensure our candidates always know the current status of their application.
-
What are the possible forms of cooperation?We offer employment based on a contract of employment (Umowa o Pracę). Details regarding the employment terms are discussed during the recruitment process.