CSP Tools Tower Lead
- Calgary, AB, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Posting language
- English
- Posted
Original job description
Job title: CSP Tools Tower Lead
Location: Calgary
Work Model: Onsite 5 days/wk
Required Technical Skills
- Microsoft Defender for Endpoint (MDE)
- Microsoft Defender for Identity (MDI)
- Microsoft Defender for Cloud Apps (MDCA)
- CrowdStrike Falcon
- Proofpoint Email Security
- Security Incident Investigation and Response
- Threat Hunting and Threat Intelligence
- Endpoint Detection & Response (EDR)
- SIEM/SOAR integration knowledge (Microsoft Sentinel preferred)
- Windows Server and Active Directory Security
- Email Security and Anti-Phishing Controls
- Security Monitoring and Alert Triage
Key Responsibilities
- Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).
- Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.
- Monitor and administer Proofpoint email security solutions to protect against phishing, malware, and business email compromise attacks.
- Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
- Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
- Fine-tune detection rules and security policies to reduce false positives and improve security visibility.
- Integrate security tools with SIEM platforms such as Microsoft Sentinel.
- Develop and maintain security monitoring dashboards, reports, and operational documentation.
- Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
- Support vulnerability management and security compliance initiatives.
More about this job
Responsibilities
Administer and tune Microsoft Defender, CrowdStrike Falcon, and Proofpoint security platforms, while investigating incidents, hunting threats, and improving detection policies. Integrate tools with SIEM platforms, maintain monitoring dashboards and documentation, and collaborate with technical and SOC teams on incident response, remediation, vulnerability management, and compliance.
Requirements
The role requires hands-on knowledge of Microsoft Defender products, CrowdStrike Falcon, Proofpoint, incident response, threat hunting, EDR, and SIEM/SOAR integration, preferably with Microsoft Sentinel. It also calls for Windows Server and Active Directory security expertise, email security and anti-phishing knowledge, and security monitoring and alert-triage capabilities.
Skills
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint Email Security
- Security Incident Investigation and Response
- Threat Hunting
- Threat Intelligence
- Endpoint Detection and Response
- SIEM/SOAR Integration
- Microsoft Sentinel
- Windows Server
- Active Directory Security
- Email Security
- Security Monitoring and Alert Triage
- Vulnerability Management
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Management & Leadership
Keywords
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint Email Security
- Microsoft Sentinel
- SIEM
- SOAR
- Endpoint Detection and Response
- Threat Hunting
- Threat Intelligence
- Incident Response
- Root Cause Analysis
- Security Monitoring
- Alert Triage
- Detection Rules
- Security Policies
- Windows Server
- Active Directory
- Email Security
- Anti-Phishing
- Business Email Compromise
- Vulnerability Management
- Security Compliance
- Security Dashboards