Apply on Employer Site

Aegis AI Security · 3 weeks ago

Email Security Analyst (AI Operations)

United States

Full-time

Remote

Entry, Mid Level

2+ years exp

Aegis AI Security is a team of ex-Google engineers focused on combating adversarial AI attacks. They are seeking an Email Security Analyst (AI Operations) to analyze threats, improve detection capabilities, and support customers in enhancing their email security posture.

Artificial Intelligence (AI)Cyber SecuritySecurity

Responsibilities

Investigate Threats : Analyze suspicious emails, attachments, and links to determine maliciousness and patterns of attack

Customer Enablement : Act as a trusted security partner for our customers, helping them understand and improve their email security posture

Data-Driven Insights : Generate reports and dashboards that highlight trends and drive actionable recommendations

Improve Detection : Partner with product and engineering to refine detection logic and feed intelligence into our AI agents

Playbook Development : Document and improve processes for investigation, escalation, and communication

Threat Intelligence : Stay ahead of emerging email threat tactics and translate them into practical defenses

Qualification

Email Security toolsPhishing analysisMalware analysisMITRE ATT&CK knowledgeSandboxing platformsForensic toolsAnalytical skillsBasic scriptingSQLGoogle Workspace familiarityMicrosoft 365 familiarityWritten communication

Required

2-5+ years of hands-on experience in cybersecurity with a strong focus on Phishing, Social Engineering, and Email-borne malware

Proven track record of operational excellence, from triaging alerts to managing complex investigations

Strong analytical skills — able to connect dots across multiple incidents and uncover patterns in attacker behavior

Comfort with reverse engineering and malware analysis, both static and dynamic

Knowledge of attacker frameworks such as MITRE ATT&CK and modern phishing TTPs

Practical experience with Email Security tools

Practical experience with Sandboxing platforms and forensic tools

Strong written communication skills — able to produce clear, concise reports for both internal teams and external audiences (e.g., customers, blog posts, industry publications)

Familiarity with Google Workspace and Microsoft 365 security ecosystems