Job Location

Job Description

At P&G, your career is built to scale with our iconic brands like Ariel®, Safeguard ®, Tide ®, Head & Shoulders®, Old Spice®, and Vicks®.

Ready to join the team that powers our iconic brands? Here’s what you’ll be doing:

We are seeking a Senior Email Security & Reliability Engineer to comprehensively own our global messaging defense platform. This role perfectly balances Core Security Engineering (designing mail flows, tuning policies, and stopping threats) with Reliability Engineering—specifically Site Reliability Engineering (SRE) to ensure the uptime of our mail routing, and Security Reliability Engineering (SecRE) to guarantee our detection pipelines and automated response systems operate flawlessly.

A heavy focus of this position is driving low-code/no-code playbook automation and orchestration to maximize operational efficiency for both the Email Security and broader Security Operations Center (SOC) teams. You will maintain our multi-layered stack—centered around Proofpoint (inline) and Microsoft Defender for Office 365 (non-inline post-delivery)—while scaling an active automation framework that leverages dynamic user risk assessments to trigger cloud-based browser isolation for our most targeted users.

Job Overview

This role requires a unique mix of messaging security expertise, automation scripting, and reliability engineering. While this is not a pure software development role, you will heavily utilize Python and PowerShell to build integrations, automate repetitive workflows, and orchestrate responses using modern SOAR platforms. The role also expects the heavy integration and use of Artificial Intelligence (AI) tools in day-to-day work—ranging from maximizing AI-driven security telemetry to utilizing AI capabilities to accelerate engineering, documentation, and troubleshooting tasks. Your goal is to ensure mail routing never drops, security controls fail-securely, and the SOC benefits from high-fidelity, automated email threat containment.

Key Responsibilities

Automation, SOAR, & SOC Integration

• SOAR Orchestration: Design, build, and optimize automated incident response playbooks within Cortex XSOAR and Torq to accelerate threat containment and reduce manual analyst overhead.
• Efficiency Optimization: Develop automation workflows to improve operational efficiency, streamline alert triaging, and eliminate manual processes for both Email Security operations and the centralized SOC.
• API Integration Management: Build and maintain reliable integrations linking Proofpoint, Microsoft Defender, and other security tools via APIs to ensure seamless telemetry sharing and orchestration.
• Scripted Automation: Write targeted, efficient scripts in Python and PowerShell to parse email headers, query security logs, manipulate data objects, and bridge gaps between disparate security solutions.

Core Email Security Engineering

• SEG Policy Management: Configure and fine-tune inbound/outbound rules within Proofpoint Enterprise Gateway to block phishing, spam, malware, and business email compromise (BEC).
• Multi-Layered Threat Hunting: Monitor and tune Microsoft Defender for Office 365 in a non-inline configuration to detect, investigate, and auto-remediate malicious emails that bypass the gateway perimeter.
• Email Governance: Enforce, troubleshoot, and audit domain health and brand protection configurations via SPF, DKIM, and DMARC protocols.
• Incident Triage & Analysis: Investigate complex SMTP routing anomalies, resolve delivery failures, and support the SOC during high-priority email-borne campaigns.

SRE & SecRE (Reliability Engineering)

• Infrastructure Reliability (SRE): Own the availability, performance, and operational health of enterprise mail routing. Build monitoring dashboards, establish alerting thresholds, and define Service Level Indicators/Objectives (SLIs/SLOs) for mail delivery.
• Control Pipeline Reliability (SecRE): Treat security controls as software systems. Ensure security APIs and playbooks fail securely without dropping threat telemetry, and validate that automation rules execute without introducing false-positive cascades.

Advanced Threat Protection & Day-to-Day AI Use

• AI Telemetry & Tooling Utilization: Heavily utilize and champion AI capabilities in your daily workflows to speed up engineering processes, optimize scripts, generate clear documentation, and troubleshoot logic errors.
• Adaptive Risk Enforcement: Maintain and mature an active deployment of dynamic user risk assessments, leveraging Proofpoint TAP data to track Very Attacked People (VAPs). Automate the enforcement of adaptive controls to trigger Cloud-Based Browser Isolation (CBI) for high-risk web browsing and explore other protection capabilities to enhance security.
• AI Threat Intelligence: Harness Proofpoint’s AI-powered classification engines (NexusAI) and Microsoft's machine learning telemetry to detect advanced identity deception and linguistic-based phishing threats. 

Job Qualifications

• Automation & SOAR Experience: Practical experience engineering automated workflows and playbooks within enterprise SOAR platforms, specifically Cortex XSOAR and/or Torq.
• Scripting Skills: Proficiency in Python and PowerShell, with a strong focus on utilizing them for security automation, data parsing, and interacting with REST APIs.
• AI Adaptability: Demonstrated experience using AI platforms or LLM-driven engineering tools to streamline technical tasks, optimize code, and accelerate daily operational delivery.
• Proofpoint & Defender Architecture: Deep administration experience with Proofpoint Enterprise Gateway, TAP, and CTR/TRAP, paired with strong operational navigation of Microsoft Defender for Office 365.
• SRE & SecRE Mindset: Proven experience managing system reliability, uptime, and automated incident response workflows for critical enterprise infrastructure.
• Remote Browser Isolation (RBI): Practical experience deploying and managing cloud-based URL/Web isolation policies linked to specific user-risk criteria.
• Messaging & Protocol Mastery: In-depth knowledge of SMTP routing, DNS infrastructure, MX records, and security headers (SPF, DKIM, DMARC).

Preferred Qualifications

• Official certifications such as Proofpoint Certified Administrator/Engineer, Palo Alto Networks Certified Security Automation Engineer (PCSAE), or Microsoft Certified: Security Operations Analyst Associate (SC-200).

Scale your career with P&G

We provide avenues to scale your expertise and technological proficiency.

As an experienced hire, you are empowered to scale your impact and go beyond being a developer with opportunities to lead, guide, and collaborate on transformative projects that power our brands.

We are committed to scale your personal growth alongside the company’s success. Here’s what’s on the table:

• Performance bonus (STAR program) that rewards managers in light with business results achieved.
• Thrive at work and your personal life through our flexible work schedule with available work from home arrangements.
• Your well-being is non-negotiable and supported by health insurance, fitness support, and an Employee Assistance Program.

Learn more about what’s in store for you at https://www.pgcareers.com/ph/en/benefits.

About us

We produce globally recognized brands and we grow the best business leaders in the industry. With a portfolio of trusted brands as diverse as ours, it is paramount our leaders are able to lead with courage the vast array of brands, categories and functions. We serve consumers around the world with one of the strongest portfolios of trusted, quality, leadership brands, including Always®, Ariel®, Gillette®, Head & Shoulders®, Herbal Essences®, Oral-B®, Pampers®, Pantene®, Tampax® and more. Our community includes operations in approximately 70 countries worldwide.

Visit http://www.pg.com to know more.

We are an equal opportunity employer and value diversity at our company. We do not discriminate against individuals on the basis of race, color, gender, age, national origin, religion, sexual orientation, gender identity or expression, marital status, citizenship, disability, HIV/AIDS status, or any other legally protected factor.

Job Schedule

Job Number

Job Segmentation