Closed listing
CSP- Cybersecurity Platform Tools Tower Lead
- Calgary, AB, Canada
Contract
This opening has closed.
The original listing is kept below for reference.
Job details
- Job type
- Contract
- Closing date
- Posting language
- English
- Posted
Similar jobs hiring now
Search current openingsOriginal job description
Archived listing. The details below describe a past opening.
Required Skillset:
Microsoft Defender for Endpoint (MDE)
Microsoft Defender for Identity (MDI)
Microsoft Defender for Cloud Apps (MDCA)
CrowdStrike Falcon
Proofpoint Email Security
Security Incident Investigation and Response
Threat Hunting and Threat Intelligence
Endpoint Detection & Response (EDR)
SIEM/SOAR integration knowledge (Microsoft Sentinel preferred)
Windows Server and Active Directory Security
Email Security and Anti-Phishing Controls
Security Monitoring and Alert Triage
Job Summary
We are seeking an experienced and highly motivated Security Tools Team Lead to lead the administration, optimization, and continuous improvement of enterprise cybersecurity platforms. The role requires deep expertise in CrowdStrike EDR, Microsoft Defender for Endpoint (MDE), Microsoft Defender for Identity (MDI), Microsoft Defender for Cloud Apps (MDCA), and Proofpoint Email Security. The successful candidate will lead a team of security specialists, manage daily operations, drive cybersecurity initiatives, support incident response activities, and collaborate closely with SOC, Infrastructure, Cloud, and Business teams.
The ideal candidate will possess strong technical expertise, leadership capabilities, stakeholder management skills, and a proactive mindset focused on enhancing the organization's security posture.
________________________________________
Key Responsibilities
Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).
Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.
Monitor and administer Proofpoint email security solutions to protect against phishing, malware, and business email compromise attacks.
Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
Fine-tune detection rules and security policies to reduce false positives and improve security visibility.
Integrate security tools with SIEM platforms such as Microsoft Sentinel.
Develop and maintain security monitoring dashboards, reports, and operational documentation.
Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
Support vulnerability management and security compliance initiatives
More about this job
Responsibilities
Lead the administration, optimization, and continuous improvement of enterprise security platforms, including Microsoft Defender, CrowdStrike Falcon, and Proofpoint. Manage security operations and incident response, conduct threat hunting, improve detections and monitoring, and collaborate with SOC, infrastructure, cloud, and business teams.
Requirements
The role requires deep technical expertise in Microsoft Defender products, CrowdStrike Falcon, Proofpoint Email Security, incident response, threat hunting, and SIEM/SOAR integration. It also calls for team leadership, stakeholder management, and experience supporting security monitoring, endpoint protection, and enterprise security initiatives.
Skills
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint Email Security
- Security Incident Investigation and Response
- Threat Hunting
- Threat Intelligence
- Endpoint Detection and Response
- SIEM/SOAR Integration
- Microsoft Sentinel
- Windows Server Security
- Active Directory Security
- Email Security
- Security Monitoring and Alert Triage
- Team Leadership
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Management & Leadership
Keywords
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint Email Security
- Endpoint Detection and Response
- SIEM
- SOAR
- Microsoft Sentinel
- Security Incident Investigation
- Incident Response
- Root Cause Analysis
- Threat Hunting
- Threat Intelligence
- Endpoint Protection
- Windows Server
- Active Directory
- Email Security
- Anti-Phishing Controls
- Security Monitoring
- Alert Triage
- Detection Rules
- Security Policies
- Security Dashboards
- Vulnerability Management
- Security Compliance
- Security Operations
- Team Leadership
- Stakeholder Management