Job Description
We are seeking an experienced Tower Lead – Cybersecurity to manage and support enterprise security operations across endpoint, identity, cloud application, and email security environments. The ideal candidate should have strong hands-on experience with Microsoft Defender solutions, CrowdStrike Falcon, and email security platforms, along with expertise in security incident response, threat detection, endpoint protection, and security monitoring.
Key Responsibilities
- Administer and support Microsoft Defender Suite, including endpoint, identity, and cloud security solutions.
- Manage CrowdStrike Falcon, including policy tuning, threat detection, and endpoint protection.
- Monitor and administer email security solutions to prevent phishing, malware, and business email compromise attacks.
- Investigate security alerts and incidents, perform root cause analysis, and recommend remediation actions.
- Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
- Fine-tune detection rules and security policies to reduce false positives.
- Integrate security tools with SIEM/SOAR platforms.
- Develop and maintain security monitoring dashboards, reports, and operational documentation.
- Collaborate with infrastructure, application, and SOC teams during incident response and remediation.
- Support vulnerability management and security compliance initiatives.
Key Requirements
- Hands-on experience with Microsoft Defender for Endpoint, Microsoft Defender for Identity, and Microsoft Defender for Cloud Apps.
- Strong experience managing CrowdStrike Falcon.
- Experience with email security, anti-phishing, and malware protection solutions.
- Knowledge of Endpoint Security and Endpoint Protection.
- Experience in Security Incident Response and Incident Management.
- Knowledge of Threat Detection, Threat Hunting, and Cyber Threat Intelligence.
- Strong understanding of Windows Server and Active Directory.
- Experience in Security Monitoring and Security Operations.
- Knowledge of SIEM/SOAR integration; Microsoft Sentinel is preferred.
- Understanding of vulnerability management and security compliance.
- Strong analytical, troubleshooting, and communication skills.
