Endpoint Security Lead
- Calgary, AB, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Job title: Microsoft Defender & Endpoint Security Lead
Location: Calgary, Onsite 5 days/wk
Term: Full Time
We require a strong hands-on security professional with proven administrative experience in MDE, MDI, and MDCA, including platform configuration, policy management, troubleshooting, and operational support. However, most of the profiles uploaded so far have primarily worked as SOC Analysts and lack the desired hands-on administration and engineering experience with these tools.
Kindly refer below for required technical skills and key responsibilities:
Required Technical Skills
•Microsoft Defender for Endpoint (MDE)
•Microsoft Defender for Identity (MDI)
•Microsoft Defender for Cloud Apps (MDCA)
•CrowdStrike Falcon
•Proofpoint Email Security
•Security Incident Investigation and Response
•Threat Hunting and Threat Intelligence
•Endpoint Detection & Response (EDR)
•SIEM/SOAR integration knowledge (Microsoft Sentinel preferred)
•Windows Server and Active Directory Security
•Email Security and Anti-Phishing Controls
•Security Monitoring and Alert Triage
Key Responsibilities
•Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).
•Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.
•Monitor and administer Proofpoint email security solutions to protect against phishing, malware, and business email compromise attacks.
•Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
•Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
•Fine-tune detection rules and security policies to reduce false positives and improve security visibility.
•Integrate security tools with SIEM platforms such as Microsoft Sentinel.
•Develop and maintain security monitoring dashboards, reports, and operational documentation.
•Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
•Support vulnerability management and security compliance initiatives.
More about this job
Responsibilities
Administer and support Microsoft Defender, CrowdStrike Falcon, and Proofpoint platforms, including configuring policies, tuning detections, and integrating tools with SIEM platforms such as Microsoft Sentinel. Investigate incidents, conduct threat hunting, improve monitoring and reporting, collaborate on remediation, and support vulnerability management and compliance initiatives.
Requirements
The role requires hands-on administrative and engineering experience with Microsoft Defender for Endpoint, Identity, and Cloud Apps, along with CrowdStrike Falcon and Proofpoint Email Security. Candidates should have experience in incident response, threat hunting, EDR, SIEM/SOAR integration, Windows Server and Active Directory security, email security, and security monitoring.
Skills
- Microsoft Defender for Endpoint (MDE)
- Microsoft Defender for Identity (MDI)
- Microsoft Defender for Cloud Apps (MDCA)
- CrowdStrike Falcon
- Proofpoint Email Security
- Security Incident Investigation and Response
- Threat Hunting
- Threat Intelligence
- Endpoint Detection and Response (EDR)
- SIEM/SOAR Integration
- Microsoft Sentinel
- Windows Server Security
- Active Directory Security
- Email Security
- Security Monitoring and Alert Triage
- Vulnerability Management
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Management & Leadership
Keywords
- Microsoft Defender for Endpoint (MDE)
- Microsoft Defender for Identity (MDI)
- Microsoft Defender for Cloud Apps (MDCA)
- CrowdStrike Falcon
- Proofpoint Email Security
- Microsoft Sentinel
- SIEM
- SOAR
- Endpoint Detection and Response (EDR)
- Security Incident Investigation
- Incident Response
- Root Cause Analysis
- Threat Hunting
- Threat Intelligence
- Windows Server
- Active Directory
- Email Security
- Anti-Phishing
- Business Email Compromise
- Security Monitoring
- Alert Triage
- Detection Rules
- Security Policies
- Vulnerability Management
- Security Compliance
- Security Dashboards
- Operational Documentation