CSP Tools Tower Lead

HRConnects; Calgary; On-site; CAD 110,000 - 140,000; Full time

Job summary

HRConnects in Calgary is seeking a CSP Tools Tower Lead to oversee defender platforms and threat management. You will lead a hands-on security operations team, optimize Defender for Endpoint, CrowdStrike Falcon, and Proofpoint, and drive incident response workflows with SIEM integration.

You will collaborate with infrastructure, application, and SOC teams to strengthen security posture and ensure compliant operations in a fast-paced environment.

Qualifications

• Hands-on experience with Microsoft Defender for Endpoint, Identity, and Cloud Apps.
• Operational skills with CrowdStrike Falcon platform management.
• Experience with Proofpoint email security solutions.
• Knowledge of security incident investigation, threat hunting, and EDR techniques.
• Familiarity with SIEM/SOAR integration, especially with Microsoft Sentinel.
• Ability to troubleshoot, fine-tune security policies, and develop monitoring dashboards.

Responsibilities

• Administer and support Defender Suite to protect endpoints, identities, and cloud apps.
• Manage CrowdStrike Falcon platform, tune policies, detect threats, maintain defenses.
• Monitor Proofpoint email security to defend against phishing and malware.
• Investigate alerts, conduct root cause analysis, and recommend remediation.
• Proactive threat hunting across endpoints, identities, and cloud environments.
• Refine detection rules and security policies to reduce false positives.
• Integrate security tools with SIEM (Microsoft Sentinel) and develop dashboards.
• Collaborate with infrastructure, application, and SOC teams during incident responses.
• Support vulnerability management and security compliance initiatives.

Skills

Microsoft Defender for Endpoint

CrowdStrike Falcon

Proofpoint

SIEM/SOAR integration

Threat hunting

Incident investigation

Monitoring dashboards

Policy tuning

Tools

Microsoft Sentinel

Job description

Join us in shaping the future of cybersecurity as a CSP Tools Tower Lead in Calgary! If you're passionate about defending organizations against evolving threats and thrive in a hands-on, collaborative environment, this is your chance to make a meaningful impact while advancing your career.

Overview

As the CSP Tools Tower Lead, you will be at the forefront of security operations, directly managing and optimizing essential tools that safeguard critical infrastructure. You'll lead a skilled team, ensure seamless platform administration, and play a pivotal role in strengthening our security posture. This is a unique opportunity to leverage your technical expertise in a dynamic setting that values innovation and teamwork.

Start Date: ASAP

Location: Calgary - onsite

Key Responsibilities

• Administer and support the Microsoft Defender Suite (MDE, MDI, MDCA) to ensure robust protection across endpoints, identities, and cloud apps.
• Manage the CrowdStrike Falcon platform, fine-tuning policies, detecting threats, and maintaining endpoint defenses.
• Monitor and enhance Proofpoint email security solutions to defend against phishing, malware, and email-based attacks.
• Investigate security alerts and incidents, conduct root cause analysis, and recommend effective remediation strategies.
• Perform proactive threat hunting across endpoints, identities, cloud environments, and email channels to identify vulnerabilities and new attack vectors.
• Refine detection rules and security policies to reduce false positives and enhance visibility.
• Integrate security tools with SIEM platforms such as Microsoft Sentinel, developing dashboards and operational documentation.
• Collaborate with infrastructure, application, and SOC teams during incident response activities.
• Support vulnerability management initiatives and ensure security compliance across the organization.

Must-Have Requirements

• Proven hands-on experience with Microsoft Defender for Endpoint, Identity, and Cloud Apps.
• Strong operational skills with CrowdStrike Falcon platform management.
• Experience with Proofpoint email security solutions.
• Knowledge of security incident investigation, threat hunting, and EDR techniques.
• Familiarity with SIEM/SOAR integration, especially with Microsoft Sentinel.
• Ability to troubleshoot, fine-tune security policies, and develop monitoring dashboards.

Nice-to-Have Skills

• Background in security incident response and remediation.
• Experience with Windows Server and Active Directory security.
• Familiarity with vulnerability management and security compliance initiatives.

Bring your expertise and passion for security to our team and help us maintain a safe, resilient digital environment.