Tower Lead
- Calgary, AB, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Job Description
We are seeking an experienced Tower Lead – Cybersecurity to manage and support enterprise security operations across endpoint, identity, cloud application, and email security environments. The ideal candidate should have strong hands-on experience with Microsoft Defender solutions, CrowdStrike Falcon, and email security platforms, along with expertise in security incident response, threat detection, endpoint protection, and security monitoring.
Key Responsibilities
- Administer and support Microsoft Defender Suite, including endpoint, identity, and cloud security solutions.
- Manage CrowdStrike Falcon, including policy tuning, threat detection, and endpoint protection.
- Monitor and administer email security solutions to prevent phishing, malware, and business email compromise attacks.
- Investigate security alerts and incidents, perform root cause analysis, and recommend remediation actions.
- Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
- Fine-tune detection rules and security policies to reduce false positives.
- Integrate security tools with SIEM/SOAR platforms.
- Develop and maintain security monitoring dashboards, reports, and operational documentation.
- Collaborate with infrastructure, application, and SOC teams during incident response and remediation.
- Support vulnerability management and security compliance initiatives.
Key Requirements
- Hands-on experience with Microsoft Defender for Endpoint, Microsoft Defender for Identity, and Microsoft Defender for Cloud Apps.
- Strong experience managing CrowdStrike Falcon.
- Experience with email security, anti-phishing, and malware protection solutions.
- Knowledge of Endpoint Security and Endpoint Protection.
- Experience in Security Incident Response and Incident Management.
- Knowledge of Threat Detection, Threat Hunting, and Cyber Threat Intelligence.
- Strong understanding of Windows Server and Active Directory.
- Experience in Security Monitoring and Security Operations.
- Knowledge of SIEM/SOAR integration; Microsoft Sentinel is preferred.
- Understanding of vulnerability management and security compliance.
- Strong analytical, troubleshooting, and communication skills.
More about this job
Responsibilities
Administer and optimize Microsoft Defender, CrowdStrike Falcon, and email security solutions while monitoring for threats and investigating security incidents. Lead threat hunting, detection tuning, SIEM/SOAR integration, operational reporting, and collaboration with infrastructure, application, and SOC teams on remediation and compliance.
Requirements
Requires hands-on experience with Microsoft Defender for Endpoint, Identity, and Cloud Apps, CrowdStrike Falcon, and email security solutions. Candidates should also have expertise in incident response, threat detection and hunting, Windows Server, Active Directory, security operations, SIEM/SOAR, vulnerability management, and compliance.
Skills
- Microsoft Defender
- CrowdStrike Falcon
- Email Security
- Endpoint Protection
- Security Incident Response
- Incident Management
- Threat Detection
- Threat Hunting
- Cyber Threat Intelligence
- Windows Server
- Active Directory
- Security Monitoring
- SIEM/SOAR Integration
- Microsoft Sentinel
- Vulnerability Management
- Security Compliance
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Management & Leadership
Keywords
- Microsoft Defender Suite
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- CrowdStrike Falcon
- Email Security
- Anti-Phishing
- Malware Protection
- Business Email Compromise
- Endpoint Security
- Endpoint Protection
- Security Incident Response
- Incident Management
- Root Cause Analysis
- Threat Detection
- Threat Hunting
- Cyber Threat Intelligence
- Security Monitoring
- Security Operations
- Windows Server
- Active Directory
- SIEM
- SOAR
- Microsoft Sentinel
- Vulnerability Management
- Security Compliance
- Detection Rules
- Security Policies
- Security Dashboards