Analyst, Information Security

The Analyst, Information Security (Seasonal) position will support Major League Baseball’s Email Security team with hands-on operational work, Microsoft 365 administration, ICES platform support, DMARC and sender authentication efforts, scripting, automation, and email security project execution. This role is ideal for someone with practical experience investigating email threats, working with enterprise email security tools, supporting authentication and domain protection efforts, and automating repetitive security workflows. The analyst will help protect Major League Baseball, Clubs, and related business units from phishing, business email compromise, spoofing, malware, impersonation, credential harvesting, and other email-based threats.

Responsibilities

Email Security Operations

• Support administration, monitoring, and tuning of Major League Baseball’s email security platforms, including Microsoft Defender for Office 365, Exchange Online Protection, ICES solutions, secure email gateways, and related tools
• Assist with phishing, BEC, spoofing, malware, impersonation, credential harvesting, and suspicious-message investigations
• Analyze email headers, message traces, authentication results, URLs, attachments, sender reputation, and related telemetry to support detection and response
• Review quarantined messages, investigate false positives and false negatives, and support allow/block and policy-tuning decisions

Microsoft 365, ICES, and Authentication Support

• Assist with Microsoft 365 email security administration, including Defender for Office 365, Exchange Online Protection, Exchange Admin Center, Defender XDR, Threat Explorer, message trace, and related capabilities
• Support ICES platform configuration, integrations, testing, operational maintenance, and reporting
• Support SPF, DKIM, and DMARC configuration, reporting, and alignment across Major League Baseball-managed domains; exposure to BIMI and VMC is a plus
• Assist with third-party sender validation, mail-flow review, authentication alignment, and domain protection efforts

Scripting, Automation, and Tooling

• Use scripting languages such as Python, PowerShell, Go, or Bash to automate repetitive email security tasks, parse data, enrich investigations, and improve reporting
• Work with Microsoft Graph, REST APIs, and security tool APIs to collect data, integrate systems, and support automation
• Support proof-of-concept testing and evaluation of new email security tools, integrations, and workflows
• Help improve operational efficiency through lightweight automation, repeatable processes, and clear documentation

Documentation and Project Support

• Maintain accurate Jira, Asana, Confluence, GitHub, change-management, and configuration records
• Create and update SOPs, runbooks, investigation guides, configuration documentation, and operational procedures
• Track action items, document findings, and coordinate with security engineering, IT, infrastructure, and business stakeholders
• Stay current on email-based threats and summarize relevant trends, risks, and recommendations for the team

Qualifications & Skills

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience
• 2+ years of experience in email security, information security, SOC operations, messaging administration, IT operations, or a related technical role
• Experience investigating suspicious emails, phishing reports, BEC attempts, spoofing, impersonation, malware delivery, or credential-harvesting activity
• Familiarity with Microsoft 365 email administration or security tools, such as Defender for Office 365, Exchange Online Protection, Exchange Admin Center, Defender XDR, message trace, or Microsoft Graph
• Familiarity with SPF, DKIM, DMARC, and common email authentication concepts

Technical Skills

• Ability to investigate suspicious emails using headers, message traces, authentication results, URLs, attachments, sender reputation, and security telemetry
• Understanding of common email threats, including phishing, BEC, spoofing, impersonation, malware delivery, credential harvesting, domain abuse, and sender reputation issues
• Ability to write or modify scripts in at least one language, such as Python, PowerShell, Go, or Bash
• Comfort working with APIs, logs, structured data, automation workflows, and security reporting
• Familiarity with collaboration and documentation tools such as Jira, Asana, Confluence, GitHub, or similar platforms
• Ability to document technical procedures clearly and maintain accurate operational records

Core Competencies

• Strong organizational skills and attention to detail
• Clear written and verbal communication skills
• Good judgment when handling sensitive information, user-reported messages, and security incidents
• Curiosity, persistence, and strong problem-solving ability
• Ability to work independently while escalating appropriately
• Comfort with testing, change control, and balancing security outcomes with business mail-flow reliability
• Interest in continuous learning and growth within email security engineering

Pay Rate: $30.00 per hour

The actual offer will carefully consider a wide range of factors, including your work experience, education, skills, and any other factors MLB considers relevant to the hiring decision.

Why MLB?

Major League Baseball (MLB) is the most historic of the major professional sports leagues in the United States and Canada. Employees love working at MLB because of the culture of growth, teamwork, and professionalism. Employees who are most successful at MLB take initiative, know how to identify problems and provide solutions, and always put the Team first. For those ready to step up to the plate and join the major leagues, MLB takes the same approach as teams do with their players: empowering our “workforce athletes” to be at their best by engineering experiences that put employees in the best position to succeed. Major League Baseball is looking for candidates who are passionate about growing America’s pastime to best serve its fans for decades to come.

Colorado Residents: Colorado based applicants may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Are you ready to Step Up to the Plate? Apply below!