CSP Tools Tower Lead

Job summary

Lead and administer Microsoft Defender, CrowdStrike Falcon, and Proofpoint security platforms to protect endpoints, identities, cloud applications, and email. Investigate incidents, conduct threat hunting, improve detection and monitoring, integrate tools with Microsoft Sentinel, and collaborate on incident response and compliance.

Job details

Join us in shaping the future of cybersecurity as a CSP Tools Tower Lead in Calgary! If you're passionate about defending organizations against evolving threats and thrive in a hands-on, collaborative environment, this is your chance to make a meaningful impact while advancing your career. Overview As the CSP Tools Tower Lead, you will be at the forefront of security operations, directly managing and optimizing essential tools that safeguard critical infrastructure. You'll lead a skilled team, ensure seamless platform administration, and play a pivotal role in strengthening our security posture. This is a unique opportunity to leverage your technical expertise in a dynamic setting that values innovation and teamwork. Start Date: ASAP Location: Calgary - onsite Salary: $130 000- 140 000/ yr Key Responsibilities Administer and support the Microsoft Defender Suite (MDE, MDI, MDCA) to ensure robust protection across endpoints, identities, and cloud apps. Manage the CrowdStrike Falcon platform, fine-tuning policies, detecting threats, and maintaining endpoint defenses. Monitor and enhance Proofpoint email security solutions to defend against phishing, malware, and email-based attacks. Investigate security alerts and incidents, conduct root cause analysis, and recommend effective remediation strategies. Perform proactive threat hunting across endpoints, identities, cloud environments, and email channels to identify vulnerabilities and new attack vectors. Refine detection rules and security policies to reduce false positives and enhance visibility. Integrate security tools with SIEM platforms such as Microsoft Sentinel, developing dashboards and operational documentation. Collaborate with infrastructure, application, and SOC teams during incident response activities. Support vulnerability management initiatives and ensure security compliance across the organization. Must-Have Requirements Proven hands-on experience with Microsoft Defender for Endpoint, Identity, and Cloud Apps. Strong operational skills with CrowdStrike Falcon platform management. Experience with Proofpoint email security solutions. Knowledge of security incident investigation, threat hunting, and EDR techniques. Familiarity with SIEM/SOAR integration, especially with Microsoft Sentinel. Ability to troubleshoot, fine-tune security policies, and develop monitoring dashboards. Nice-to-Have Skills Background in security incident response and remediation. Experience with Windows Server and Active Directory security. Familiarity with vulnerability management and security compliance initiatives. Bring your expertise and passion for security to our team and help us maintain a safe, resilient digital environment. If you're ready to lead, innovate, and make an impact, we want to hear from you—apply today!

What you’ll do

Lead and administer Microsoft Defender, CrowdStrike Falcon, and Proofpoint security platforms to protect endpoints, identities, cloud applications, and email. Investigate incidents, conduct threat hunting, improve detection and monitoring, integrate tools with Microsoft Sentinel, and collaborate on incident response and compliance.

Requirements

Requires hands-on experience with Microsoft Defender for Endpoint, Identity, and Cloud Apps; operational expertise managing CrowdStrike Falcon; and experience with Proofpoint. Candidates should also understand incident investigation, threat hunting, EDR, SIEM/SOAR integration—especially Microsoft Sentinel—and security policy tuning and dashboard development.

Listed skills

• Root Cause Analysis · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Microsoft Defender
• CrowdStrike Falcon
• Proofpoint
• Microsoft Sentinel
• Security Operations
• Incident Investigation
• Threat Hunting
• Endpoint Detection and Response
• SIEM/SOAR Integration
• Security Policy Tuning
• Monitoring Dashboards
• Root Cause Analysis
• Incident Response
• Vulnerability Management
• Windows Server Security
• Active Directory Security

Job areas

• Security & Safety
• Technology
• Management & Leadership

More jobs from HRConnects