CSP Tools Tower Lead

HRConnects; Calgary; On-site; CAD 130,000 - 140,000; Full time

Job summary

HRConnects in Calgary, onsite, seeks a CSP Tools Tower Lead to manage and optimize Defender, CrowdStrike, and Proofpoint across endpoints, identities, and cloud apps. You will lead a skilled SOC‑oriented team, refine detection rules, and build dashboards while collaborating with IT and security peers to strengthen our security posture.

Ideal candidates bring hands‑on Defender for Endpoint/Identity/Cloud Apps, CrowdStrike Falcon, Proofpoint, and SIEM experience, plus a proactive, collaborative

Qualifications

• Hands‑on experience with Defender for Endpoint, Identity and Cloud Apps.
• Strong CrowdStrike Falcon platform management skills.
• Experience with Proofpoint email security solutions.
• Knowledge of security incident investigation, threat hunting, and EDR.
• Familiarity with SIEM/SOAR integration, especially Microsoft Sentinel.
• Ability to troubleshoot and develop monitoring dashboards.

Responsibilities

• Administer and optimize Microsoft Defender Suite (MDE/MDI/MDCA) for endpoints, identities, and cloud apps.
• Manage CrowdStrike Falcon platform, tune policies, detect threats, and maintain endpoint defenses.
• Monitor and enhance Proofpoint email security to defend against phishing, malware, and email-based attacks.
• Investigate security alerts, perform root cause analysis, and recommend remediation actions.
• Proactively hunt threats across endpoints, identities, cloud enviroments, and email channels.
• Refine detection rules and security policies to reduce false positives and improve visibility.
• Integrate tools with SIEM platforms like Microsoft Sentinel; create dashboards and docs.
• Collaborate with infrastructure, app, and SOC teams during incident response.
• Support vulnerability management and security compliance efforts.

Skills

Threat hunting

Incident investigation

Security monitoring

Dashboard development

Policy fine-tuning

Tools

Microsoft Defender for Endpoint

Microsoft Defender for Identity

Microsoft Defender for Cloud Apps

CrowdStrike Falcon

Proofpoint

Microsoft Sentinel

Job description

Join us in shaping the future of cybersecurity as a CSP Tools Tower Lead in Calgary! If you're passionate about defending organizations against evolving threats and thrive in a hands-on, collaborative environment, this is your chance to make a meaningful impact while advancing your career.

Overview

As the CSP Tools Tower Lead, you will be at the forefront of security operations, directly managing and optimizing essential tools that safeguard critical infrastructure. You'll lead a skilled team, ensure seamless platform administration, and play a pivotal role in strengthening our security posture. This is a unique opportunity to leverage your technical expertise in a dynamic setting that values innovation and teamwork.

Start Date: ASAP

Location: Calgary - onsite

Salary: $130 000- 140 000/ yr

Key Responsibilities

• Administer and support the Microsoft Defender Suite (MDE, MDI, MDCA) to ensure robust protection across endpoints, identities, and cloud apps.
• Manage the CrowdStrike Falcon platform, fine-tuning policies, detecting threats, and maintaining endpoint defenses.
• Monitor and enhance Proofpoint email security solutions to defend against phishing, malware, and email-based attacks.
• Investigate security alerts and incidents, conduct root cause analysis, and recommend effective remediation strategies.
• Perform proactive threat hunting across endpoints, identities, cloud environments, and email channels to identify vulnerabilities and new attack vectors.
• Refine detection rules and security policies to reduce false positives and enhance visibility.
• Integrate security tools with SIEM platforms such as Microsoft Sentinel, developing dashboards and operational documentation.
• Collaborate with infrastructure, application, and SOC teams during incident response activities.
• Support vulnerability management initiatives and ensure security compliance across the organization.

Must-Have Requirements

• Proven hands-on experience with Microsoft Defender for Endpoint, Identity, and Cloud Apps.
• Strong operational skills with CrowdStrike Falcon platform management.
• Experience with Proofpoint email security solutions.
• Knowledge of security incident investigation, threat hunting, and EDR techniques.
• Familiarity with SIEM/SOAR integration, especially with Microsoft Sentinel.
• Ability to troubleshoot, fine-tune security policies, and develop monitoring dashboards.

Nice-to-Have Skills

• Background in security incident response and remediation.
• Experience with Windows Server and Active Directory security.
• Familiarity with vulnerability management and security compliance initiatives.

Bring your expertise and passion for security to our team and help us maintain a safe, resilient digital environment.