CSP Tools Tower Lead
- Calgary, AB, Canada
Applications open in a new tab.
Job details
- Posting language
- English
- Posted
Original job description
Job title: CSP Tools Tower Lead
Location: Calgary
Work Model: Onsite 5 days/wk
Required Technical Skills
- Microsoft Defender for Endpoint (MDE)
- Microsoft Defender for Identity (MDI)
- Microsoft Defender for Cloud Apps (MDCA)
- CrowdStrike Falcon
- Proofpoint Email Security
- Security Incident Investigation and Response
- Threat Hunting and Threat Intelligence
- Endpoint Detection & Response (EDR)
- SIEM/SOAR integration knowledge (Microsoft Sentinel preferred)
- Windows Server and Active Directory Security
- Email Security and Anti-Phishing Controls
- Security Monitoring and Alert Triage
Key Responsibilities
- Administer and support Microsoft Defender Suite (MDE, MDI,
MDCA).
- Manage CrowdStrike Falcon platform including policy tuning,
threat detection, and endpoint protection.
- Monitor and administer Proofpoint email security solutions to
protect against phishing, malware, and business email compromise attacks.
- Investigate security alerts and incidents, perform root cause
analysis, and provide remediation recommendations.
- Conduct proactive threat hunting across endpoints, identities,
cloud applications, and email environments.
- Fine-tune detection rules and security policies to reduce false
positives and improve security visibility.
- Integrate security tools with SIEM platforms such as Microsoft
Sentinel.
- Develop and maintain security monitoring dashboards, reports,
and operational documentation.
- Collaborate with infrastructure, application, and SOC teams
during incident response and remediation activities.
- Support vulnerability management and security compliance
initiatives.
More about this job
Responsibilities
The CSP Tools Tower Lead at Astra North Infoteck Inc. will run security tools such as Microsoft Defender and CrowdStrike, investigate alerts, hunt for threats and tune detection rules. The role also builds dashboards and works with other teams during incident response.
Requirements
Candidates need hands-on experience with Microsoft Defender, CrowdStrike Falcon and Proofpoint, plus incident investigation and threat hunting skills. Knowledge of SIEM/SOAR integration (Microsoft Sentinel preferred), Windows Server and Active Directory security is required.
Skills
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint Email Security
- Security Incident Investigation and Response
- Threat Hunting
- Threat Intelligence
- Endpoint Detection and Response (EDR)
- Microsoft Sentinel
- SIEM
- SOAR
- Windows Server Security
- Active Directory Security
- Email Security
- Anti-Phishing Controls
- Security Monitoring
- Alert Triage
- Root Cause Analysis
- Detection Rule Tuning
- Vulnerability Management
- Security Compliance
- Security Dashboards and Reporting
Categories
- Technology
- Security & Safety
- Software
Keywords
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- MDE
- MDI
- MDCA
- CrowdStrike Falcon
- Proofpoint
- Microsoft Sentinel
- SIEM
- SOAR
- EDR
- Endpoint Detection and Response
- Threat Hunting
- Threat Intelligence
- Incident Response
- Security Operations
- SOC
- Email Security
- Anti-Phishing
Seniority
Lead
Tools
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint
- Microsoft Sentinel
Languages
- English