Senior Threat Research Engineer, Mimecast
2 days a week in office
Cloud cybersecurity services
Be an early applicant
Cloud cybersecurity services
1001+ employees
Be an early applicant
2 days a week in office
1001+ employees
Company mission
To stop bad things from happening to good organisations.
Role
Who you are
- Experience with email detection/filtering engines (Rspamd, SpamAssassin, MailScanner, or similar), including rule/signature development
- Knowledge of the email threat landscape, their associated TTPs, and a strong curiosity to learn about the infrastructure and methodologies behind phishing and malicious email campaigns
- Understanding of core email protocols (SMTP/POP/IMAP) and authentication standards (DKIM, SPF, DMARC)
- Experience in Python/Lua or other scripting languages, effectively applied to automation, data analysis, and tool development
- Advanced SQL skills for querying, manipulating, and extracting insights from large, complex datasets
- Excellent time management and ability to self-prioritize in a fast-paced environment
- Able to collaborate effectively both in-office and remotely; strong written and verbal communication skills
- A genuine eagerness to learn continuously, adapt to new challenges, and proactively share knowledge with colleagues
What the job involves
- As a Threat Research Engineer, you will be a key player in defending our customers against a wide array of email-borne threats, with a primary focus on utilizing and enhancing our anti-spam engines and rule-based detection systems
- You will be hunting for threats like phishing, business email compromise (BEC), spam, and other unwanted mail within large datasets
- Your core responsibilities will involve in-depth analysis of email characteristics, developing and tuning detection strategies for our anti-spam platforms, documenting new attack techniques, and identifying detection gaps
- You will collaborate closely with product and engineering teams to suggest and implement improvements, ensuring our email security solutions remain highly effective
- Proactively identify and dissect diverse email-borne threats, including sophisticated phishing, Business Email Compromise (BEC), malware campaigns, and pervasive spam
- Conduct in-depth technical analysis of email headers, content, sending infrastructure, URLs (particularly in the context of phishing and spam), and other message attributes to identify crucial patterns and characteristics of unwanted or malicious email
- Develop, test, and maintain complex detection signatures and rules in antispam engines (e.g., Rspamd, SpamAssassin etc)
- Monitor threat trends and adapt detection logic to keep pace with evolving attack techniques
- Collaborate with a global team of Threat Researchers to investigate complex campaigns, share insights, and collectively improve detection efficacy
- Automate data extraction, in-depth analysis, and the reporting of detection performance and efficacy
- Query and analyse large datasets utilise platforms such as Clickhouse, AWS Athena etc. identify detection gaps, measure scanner effectiveness, and drive data-informed improvements
- Document observed Tactics, Techniques, and Procedures (TTPs) related to email-delivered threats and communicate them internally or externally
- Participate in cross-functional projects with Product, Engineering, and Operations teams to enhance Mimecast’s overall security posture and product capabilities
Salary benchmarks
Our take
Mimecast’s next-gen cloud-based security, archiving, and continuity services provide comprehensive risk management in a fully integrated solution, protecting over 40,000 customers worldwide and blocking 162+ million threats. With its adaptable platform, Mimecast focuses on developing capabilities to meet increasing risks and forming strategic partnerships.
Following its acquisition by Permira, Mimecast has expanded globally, reaching more countries throughout 2023. Recently, Mimecast acquired Elevate Security, enhancing its offerings with insights into human behaviours and risks. Elevate Security's platform flags high-risk individuals with a precision risk scoring algorithm, complementing Mimecast’s Awareness Training for targeted intervention and training.
Since 2003, Mimecast has empowered customers to mitigate risks and manage complexities in a threat landscape driven by cyberattacks and human error. Mimecast’s advanced solutions in threat detection, brand protection, and data retention enable organisations to work protected.
Freddie
Company Specialist at Welcome to the Jungle
Insights
10% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Sep 2012
$62m
SERIES C
Jan 2010
$21m
SERIES B
Total funding: $88.8m
Company benefits
- Your finances and your future: - Pension - Communication Allowance - Employee Referral
- Your health: - Mediclaim - Insurance Coverage - Meal Coupons - Virtual Therapy Services
- Your life and your family: - Casual Leave - Flexible working - Family Leave - Long Service Leave - Employee Assistance Program
- Your community: - Volunteer Days - Gift Matching
Company HQ
City of London, London, UK
Leadership
Peter Bauer
(Member of the Board of Directors and Co-founder)Former Managing Director of FAB Technology (Co-Founder) and Idion Solutions Cape Town. Was the CEO of Mimecast between 2003 and 2024.
Share this job
View 19 more jobs at Mimecast