CSP Tools Tower Lead

Job title : CSP Tools Tower Lead

Location : Calgary

Work Model : Onsite 5 days/wk

Required Technical Skills

• Microsoft Defender for Endpoint (MDE)
• Microsoft Defender for Identity (MDI)
• Microsoft Defender for Cloud Apps (MDCA)
• CrowdStrike Falcon
• Proofpoint Email Security
• Security Incident Investigation and Response
• Threat Hunting and Threat Intelligence
• Endpoint Detection & Response (EDR)
• SIEM/SOAR integration knowledge (Microsoft Sentinel preferred)
• Windows Server and Active Directory Security
• Email Security and Anti-Phishing Controls
• Security Monitoring and Alert Triage

Key Responsibilities

• Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).
• Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.
• Monitor and administer Proofpoint email security solutions to protect against phishing, malware, and business email compromise attacks.
• Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
• Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
• Fine-tune detection rules and security policies to reduce false positives and improve security visibility.
• Integrate security tools with SIEM platforms such as Microsoft Sentinel.
• Develop and maintain security monitoring dashboards, reports, and operational documentation.
• Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
• Support vulnerability management and security compliance initiatives.