Major League Baseball · United States
Join Major League Baseball’s Email Security team to protect the organization, its clubs, and business units from email-based threats like phishing, BEC, spoofing, and malware. This seasonal role offers hands-on operational support with Microsoft 365, ICES, and automation tools while contributing to enterprise email security and domain protection efforts.
What You Will Do
Support administration, monitoring, and tuning of email security platforms including Microsoft Defender for Office 365, Exchange Online Protection, ICES, and secure email gateways.
Assist with phishing, BEC, spoofing, malware, impersonation, credential harvesting, and suspicious-message investigations.
Analyze email headers, message traces, authentication results, URLs, attachments, sender reputation, and related telemetry to support detection and response.
Review quarantined messages, investigate false positives and false negatives, and support allow/block and policy-tuning decisions.
Assist with Microsoft 365 email security administration, including Defender for Office 365, Exchange Online Protection, Exchange Admin Center, Defender XDR, Threat Explorer, message trace, and related capabilities.
Support ICES and domain protection efforts including SPF, DKIM, DMARC, and BIMI/VMC exposure.
Write and modify scripts in Python, PowerShell, Go, or Bash to automate security workflows.
Work with collaboration and documentation tools (Jira, Asana, Confluence, GitHub) to manage security tasks and documentation.
What We Are Looking For
2+ years of experience in email security, information security, SOC operations, messaging administration, IT operations, or related technical role.
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent practical experience.
Experience investigating suspicious emails, phishing reports, BEC attempts, spoofing, impersonation, malware delivery, or credential-harvesting activity.
Familiarity with Microsoft 365 email security administration or security tools (Defender for Office 365, Exchange Online Protection, Exchange Admin Center, Defender XDR, message trace, Microsoft Graph).
Familiarity with SPF, DKIM, DMARC, and common email authentication concepts.
Ability to investigate suspicious emails using headers, message traces, authentication results, URLs, attachments, sender reputation, and security telemetry.
Ability to write or modify scripts in at least one language (Python, PowerShell, Go, or Bash).
Comfort working with APIs, logs, structured data, automation workflows, and security reporting.
Familiarity with collaboration and documentation tools (Jira, Asana, Confluence, GitHub).
If you’re ready to Step Up to the Plate, apply below!