CSP Tools Tower Lead

Job summary

Lead the security tools team in administering and optimizing enterprise cybersecurity platforms including endpoint, email, identity, and cloud security. Manage daily operations, drive security initiatives, and act as an escalation point for critical security incidents.

Job details

Job Summary We are seeking an experienced and highly motivated Security Tools Team Lead to lead the administration, optimization, and continuous improvement of enterprise cybersecurity platforms. The role requires deep expertise in CrowdStrike EDR, Microsoft Defender for Endpoint (MDE), Microsoft Defender for Identity (MDI), Microsoft Defender for Cloud Apps (MDCA), and Proofpoint Email Security. The successful candidate will lead a team of security specialists, manage daily operations, drive cybersecurity initiatives, support incident response activities, and collaborate closely with SOC, Infrastructure, Cloud, and Business teams. The ideal candidate will possess strong technical expertise, leadership capabilities, stakeholder management skills, and a proactive mindset focused on enhancing the organization's security posture. Primary Skillset Microsoft Defender for Endpoint (MDE) Microsoft Defender for Identity (MDI) Microsoft Defender for Cloud Apps (MDCA) Secondary Skillset CrowdStrike EDR Proofpoint Email Security ________________________________________ Key Responsibilities Security Tools Leadership & Operations Lead the Security Tools team responsible for endpoint, email, identity, and cloud security technologies. Provide technical leadership, mentoring, and guidance to team members. Ensure operational excellence and availability of all security platforms. Manage day-to-day administration, configuration, maintenance, and optimization of security tools. Develop and maintain operational procedures, SOPs, and knowledge articles. Drive service improvements and automation initiatives. Endpoint Security Management Manage And Administer CrowdStrike EDR Microsoft Defender for Endpoint (MDE) Oversee agent deployment, sensor health, policy management, exclusions, detections, and preventive controls. Drive endpoint hardening initiatives and security posture improvements. Monitor security recommendations and remediation activities. Email Security Administration Administer And Support Proofpoint Email Protection Proofpoint TAP Proofpoint TRAP Manage phishing protection, email authentication, mail flow security, URL defense, attachment defense, and threat remediation. Review and implement policy updates, safe sender lists, and threat intelligence recommendations. Identity & Cloud Security Manage Microsoft Defender for Identity (MDI). Manage Microsoft Defender for Cloud Apps (MDCA). Monitor identity-based threats, cloud application risks, suspicious activities, and compliance alerts. Collaborate with IAM, Azure, and Cloud teams for remediation activities. Incident Response & Threat Management Act as an escalation point for critical security incidents. Support SOC investigations involving endpoint, email, cloud, and identity threats. Conduct threat hunting and root cause analysis. Ensure timely containment, eradication, and recovery activities. Governance & Reporting Own weekly, monthly, and quarterly security reporting. Develop KPI and SLA dashboards for security tool operations. Present operational updates, risks, and improvement plans to customers and senior management. Maintain risk registers and track remediation activities. Stakeholder & Vendor Management Partner with internal security teams, infrastructure teams, and business stakeholders. Engage with Microsoft, CrowdStrike, and Proofpoint support teams for issue resolution. Participate in architecture reviews and security enhancement initiatives. Team Management Manage resource planning, workload distribution, and shift coverage. Conduct performance coaching, mentoring, and technical reviews. Drive skill development and certification initiatives. Ensure adequate backup coverage and succession planning. ________________________________________ Required Technical Skills Endpoint Security CrowdStrike EDR Microsoft Defender for Endpoint (MDE) Endpoint Threat Detection & Response Vulnerability Management Email Security Proofpoint Email Protection Proofpoint TAP Proofpoint TRAP Anti-Phishing Technologies SPF, DKIM, DMARC Identity & Cloud Security Microsoft Defender for Identity (MDI) Microsoft Defender for Cloud Apps (MDCA) Microsoft Entra ID / Azure AD Identity Threat Detection Security Operations Incident Response Threat Hunting Security Monitoring Cyber Threat Intelligence Security Governance Additional Skills PowerShell Automation Microsoft Security Portal SIEM Integration ServiceNow Azure Security Services ________________________________________ Required Experience & Qualifications Degree in Computer Science, Cyber Security, Information Technology, or a related discipline. 8+ years of cybersecurity experience. Minimum 5+ years leading security tools teams. Strong hands-on experience with CrowdStrike, Proofpoint, MDE, MDI, and MDCA. Experience supporting enterprise-scale environments. Excellent communication and stakeholder management skills. Preferred Certifications CrowdStrike Administrator Microsoft Certified: Security Operations Analyst (SC-200) Microsoft Certified: Identity & Access Administrator (SC-300) Microsoft Certified: Security Administrator (SC-100 / AZ-500) ________________________________________ Preferred Candidate Profile Strong customer-facing experience. Ability to work in a fast-paced operational environment. Demonstrated ability to drive proactive security improvements. Strong analytical, troubleshooting, and leadership capabilities. Willingness to work from Calgary, Alberta, Canada and participate in on-call support when required.

What you’ll do

Lead the security tools team in administering and optimizing enterprise cybersecurity platforms including endpoint, email, identity, and cloud security. Manage daily operations, drive security initiatives, and act as an escalation point for critical security incidents.

Requirements

Requires a degree in Computer Science or a related field with over 8 years of cybersecurity experience, including at least 5 years in a leadership role. Must have deep technical expertise in CrowdStrike, Proofpoint, and the Microsoft Defender suite.

Listed skills

• Team Leadership · Preferred
• Stakeholder Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Microsoft Defender for Endpoint
• Microsoft Defender for Identity
• Microsoft Defender for Cloud Apps
• CrowdStrike EDR
• Proofpoint Email Security
• Incident Response
• Threat Hunting
• Security Operations
• PowerShell Automation
• Azure Security Services
• Stakeholder Management
• Team Leadership
• Vulnerability Management
• SIEM Integration
• Identity and Access Management
• Security Governance

Job areas

• Security & Safety
• Technology
• Management & Leadership
• Consulting
• Software