CSP Tools Tower Lead
- Calgary, AB, Canada
Salary: $130 000- 140 000/ yr · Full-time
Applications open in a new tab.
Job details
- Pay
- Salary: $130 000- 140 000/ yr
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Join us in shaping the future of cybersecurity as a CSP Tools Tower Lead in Calgary! If you're passionate about defending organizations against evolving threats and thrive in a hands-on, collaborative environment, this is your chance to make a meaningful impact while advancing your career.
Overview
As the CSP Tools Tower Lead, you will be at the forefront of security operations, directly managing and optimizing essential tools that safeguard critical infrastructure. You'll lead a skilled team, ensure seamless platform administration, and play a pivotal role in strengthening our security posture. This is a unique opportunity to leverage your technical expertise in a dynamic setting that values innovation and teamwork.
Start Date: ASAP
Location: Calgary - onsite
Salary: $130 000- 140 000/ yr
Key Responsibilities
Overview
As the CSP Tools Tower Lead, you will be at the forefront of security operations, directly managing and optimizing essential tools that safeguard critical infrastructure. You'll lead a skilled team, ensure seamless platform administration, and play a pivotal role in strengthening our security posture. This is a unique opportunity to leverage your technical expertise in a dynamic setting that values innovation and teamwork.
Start Date: ASAP
Location: Calgary - onsite
Salary: $130 000- 140 000/ yr
Key Responsibilities
- Administer and support the Microsoft Defender Suite (MDE, MDI, MDCA) to ensure robust protection across endpoints, identities, and cloud apps.
- Manage the CrowdStrike Falcon platform, fine-tuning policies, detecting threats, and maintaining endpoint defenses.
- Monitor and enhance Proofpoint email security solutions to defend against phishing, malware, and email-based attacks.
- Investigate security alerts and incidents, conduct root cause analysis, and recommend effective remediation strategies.
- Perform proactive threat hunting across endpoints, identities, cloud environments, and email channels to identify vulnerabilities and new attack vectors.
- Refine detection rules and security policies to reduce false positives and enhance visibility.
- Integrate security tools with SIEM platforms such as Microsoft Sentinel, developing dashboards and operational documentation.
- Collaborate with infrastructure, application, and SOC teams during incident response activities.
- Support vulnerability management initiatives and ensure security compliance across the organization.
- Proven hands-on experience with Microsoft Defender for Endpoint, Identity, and Cloud Apps.
- Strong operational skills with CrowdStrike Falcon platform management.
- Experience with Proofpoint email security solutions.
- Knowledge of security incident investigation, threat hunting, and EDR techniques.
- Familiarity with SIEM/SOAR integration, especially with Microsoft Sentinel.
- Ability to troubleshoot, fine-tune security policies, and develop monitoring dashboards.
- Background in security incident response and remediation.
- Experience with Windows Server and Active Directory security.
- Familiarity with vulnerability management and security compliance initiatives.
More about this job
Responsibilities
Lead and administer Microsoft Defender, CrowdStrike Falcon, and Proofpoint security platforms, optimizing policies and detections to protect endpoints, identities, cloud applications, and email. Investigate incidents, conduct threat hunting and root cause analysis, integrate tools with Microsoft Sentinel, and collaborate with security and infrastructure teams on response, vulnerability management, and compliance.
Requirements
Candidates need hands-on experience with Microsoft Defender for Endpoint, Identity, and Cloud Apps, along with operational expertise managing CrowdStrike Falcon and Proofpoint. They should also have experience with incident investigation, threat hunting, EDR, SIEM/SOAR integration - especially Microsoft Sentinel - and security policy tuning and dashboard development.
Skills
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint Email Security
- Security Incident Investigation
- Threat Hunting
- Endpoint Detection and Response
- Microsoft Sentinel
- SIEM/SOAR Integration
- Detection Rule Tuning
- Security Policy Management
- Monitoring Dashboard Development
- Windows Server Security
- Active Directory Security
- Vulnerability Management
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Management & Leadership
Keywords
- Cybersecurity
- Security Operations
- Microsoft Defender Suite
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Proofpoint
- Microsoft Sentinel
- SIEM
- SOAR
- Endpoint Detection and Response
- Threat Hunting
- Incident Response
- Root Cause Analysis
- Detection Rules
- Security Policies
- Monitoring Dashboards
- Vulnerability Management
- Security Compliance
- Windows Server
- Active Directory
- Phishing
- Malware
- Cloud Security
- Endpoint Security