CSP Tools Tower Lead
- Calgary, AB, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
Key Responsibilities:
Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).
Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.
Monitor and administer Proofpoint email security solutions to protect against phishing, malware, and business email compromise attacks.
Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
Fine-tune detection rules and security policies to reduce false positives and improve security visibility.
Integrate security tools with SIEM platforms such as Microsoft Sentinel.
Develop and maintain security monitoring dashboards, reports, and operational documentation.
Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
Support vulnerability management and security compliance initiatives
Microsoft Defender for Endpoint (MDE) - Admin
Microsoft Defender for Identity (MDI) - Admin
Microsoft Defender for Cloud Apps (MDCA) - Admin
More about this job
Responsibilities
Administer Microsoft Defender, CrowdStrike Falcon, and Proofpoint security platforms, and investigate alerts and incidents while conducting proactive threat hunting. Tune detections and policies, integrate tools with SIEM platforms such as Microsoft Sentinel, maintain monitoring documentation, and collaborate on incident response, vulnerability management, and compliance.
Requirements
The role calls for mid-senior-level experience administering endpoint, identity, cloud application, and email security tools. It also involves incident investigation, threat hunting, SIEM integration, detection tuning, and collaboration with SOC and infrastructure teams; no education requirements are specified.
Skills
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint
- Security Incident Investigation
- Root Cause Analysis
- Threat Hunting
- Detection Rule Tuning
- Security Policy Administration
- Microsoft Sentinel
- SIEM Integration
- Security Monitoring
- Incident Response
- Vulnerability Management
- Security Compliance
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Management & Leadership
Keywords
- Microsoft Defender Suite
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint
- Microsoft Sentinel
- SIEM
- Endpoint Protection
- Email Security
- Phishing
- Malware
- Business Email Compromise
- Security Alerts
- Incident Investigation
- Root Cause Analysis
- Remediation
- Threat Hunting
- Detection Rules
- Security Policies
- Security Monitoring
- Dashboards
- Operational Documentation
- Incident Response
- Vulnerability Management
- Security Compliance
- SOC