CSP Tools Tower Lead

Job title: CSP Tools Tower Lead

Location: Calgary

Work Model: Onsite 5 days/wk

Required Technical Skills

• Microsoft Defender for Endpoint (MDE)
  
• Microsoft Defender for Identity (MDI)
  
• Microsoft Defender for Cloud Apps (MDCA)
  
• CrowdStrike Falcon
  
• Proofpoint Email Security
  
• Security Incident Investigation and Response
  
• Threat Hunting and Threat Intelligence
  
• Endpoint Detection & Response (EDR)
  
• SIEM/SOAR integration knowledge (Microsoft Sentinel preferred)
  
• Windows Server and Active Directory Security
  
• Email Security and Anti-Phishing Controls
  
• Security Monitoring and Alert Triage
  

Key Responsibilities

• Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).
  
• Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.
  
• Monitor and administer Proofpoint email security solutions to protect against phishing, malware, and business email compromise attacks.
  
• Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
  
• Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
  
• Fine-tune detection rules and security policies to reduce false positives and improve security visibility.
  
• Integrate security tools with SIEM platforms such as Microsoft Sentinel.
  
• Develop and maintain security monitoring dashboards, reports, and operational documentation.
  
• Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
  
• Support vulnerability management and security compliance initiatives.