Email & Domain Security Specialist (Phishing & Abuse)

ROLE SUMMARY We are looking for someone to actively stop phishing attacks and domain impersonation targeting our customers. This role focuses on detecting fake domains, handling phishing incidents, securing our email setup, and working directly with registrars and hosting providers to remove threats. This is not a DMCA or copyright role. The focus is email spoofing, phishing, and domain abuse. CORE RESPONSIBILITIES ~ Monitor and identify lookalike domains targeting our brand ~ Investigate phishing emails reported by customers or partners ~ Submit takedown requests to domain registrars and hosting providers ~ Report phishing to Google Safe Browsing, Microsoft, and other platforms ~ Configure and manage SPF, DKIM, and DMARC (move to full enforcement) ~ Track and respond to email spoofing attempts ~ Maintain a simple log of threats, actions taken, and outcomes ~ Create a clear internal process for handling phishing reports quickly ~ Advise on improvements to reduce customer risk KEY REQUIREMENTS ~ Strong understanding of domains and DNS ~ Hands-on experience with SPF, DKIM, and DMARC ~ Experience handling phishing or domain abuse cases ~ Comfortable contacting registrars, hosting providers, and abuse desks ~ Able to work fast, follow up, and push for takedowns SUCCESS METRICS ~ Time to takedown (target under 48 hours) ~ Number of phishing domains identified and removed ~ Reduction in phishing complaints from customers ~ DMARC fully enforced (reject policy active) SCOPE CLARIFICATION ~ This role focuses on external threats (phishing and impersonation) ~ This is a hands-on execution role, not strategy only ~ This role does not cover general IT support or infrastructure WORKING STRUCTURE ~ Start part-time (10 hours per week) ~ Ongoing monitoring and response required ~ Weekly reporting on threats and actions taken