Microsoft Defender Security Engineer
- Calgary, AB, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Role: Microsoft Defender Security Engineer
Location: Calgary, AB – Onsite
Job Description
Required Technical Skills
Microsoft Defender for Endpoint (MDE)
Microsoft Defender for Identity (MDI)
Microsoft Defender for Cloud Apps (MDCA)
CrowdStrike Falcon
Proofpoint Email Security
Security Incident Investigation and Response
Threat Hunting and Threat Intelligence
Endpoint Detection & Response (EDR)
SIEM/SOAR integration knowledge (Microsoft Sentinel preferred)
Windows Server and Active Directory Security
Email Security and Anti-Phishing Controls
Security Monitoring and Alert Triage
Key Responsibilities
Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).
Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.
Monitor and administer Proofpoint email security solutions to protect against phishing, malware, and business email compromise attacks.
Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
Fine-tune detection rules and security policies to reduce false positives and improve security visibility.
Integrate security tools with SIEM platforms such as Microsoft Sentinel.
Develop and maintain security monitoring dashboards, reports, and operational documentation.
Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
Support vulnerability management and security compliance initiatives.
More about this job
Responsibilities
Administer and tune Microsoft Defender, CrowdStrike Falcon, and Proofpoint security platforms; investigate incidents, hunt for threats, and recommend remediation. Integrate tools with SIEM platforms, maintain monitoring dashboards and documentation, and collaborate with technical and SOC teams on response, compliance, and vulnerability management.
Requirements
The role requires hands-on knowledge of Microsoft Defender for Endpoint, Identity, and Cloud Apps, CrowdStrike Falcon, and Proofpoint Email Security. Candidates should also have experience with incident response, threat hunting, EDR, SIEM/SOAR integration, Windows Server and Active Directory security, email protection, and security monitoring.
Skills
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint Email Security
- Security Incident Investigation and Response
- Threat Hunting
- Threat Intelligence
- Endpoint Detection and Response
- SIEM/SOAR Integration
- Microsoft Sentinel
- Windows Server Security
- Active Directory Security
- Email Security
- Security Monitoring and Alert Triage
- Vulnerability Management
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
Keywords
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint Email Security
- Microsoft Sentinel
- SIEM
- SOAR
- Endpoint Detection and Response
- Incident Investigation
- Incident Response
- Root Cause Analysis
- Threat Hunting
- Threat Intelligence
- Detection Rules
- Security Policies
- Security Monitoring
- Alert Triage
- Windows Server
- Active Directory
- Email Security
- Anti-Phishing
- Business Email Compromise
- Vulnerability Management
- Security Compliance
- Security Dashboards
- Endpoint Protection