Identifying IP address

Identifying IP address

Hi,

We received an email today which might contain malicious scripts from one of the internal employee and it seems that email address of the employee is compromised. We need to trace the location of the sender by using IP address so that we can confirm whether it’s the employee who sent us email or someone else. How and where can I see the IP address of the sender?