Endpoint Security Lead

Epsilon Solutions Ltd.; Calgary; On-site; CAD 120,000 - 170,000; Full time

Job summary

Epsilon Solutions Ltd. is seeking a hands-on Microsoft Defender & Endpoint Security Lead in Calgary, onsite five days a week. You will administer and optimize Defender for Endpoint, Defender for Identity, and Defender for Cloud Apps, while leading threat hunting, incident response, and security monitoring.

Ideal candidates will have strong engineering experience and collaborate with SOC and infrastructure teams to strengthen security posture.

Qualifications

• Hands-on administration and engineering experience with Defender for Endpoint/Identity/Cloud Apps.
• Experience configuring, managing, and troubleshooting Defender suite components.
• Strong incident investigation and remediation capabilities across on-prem and cloud.
• Expertise in threat hunting and threat intelligence for endpoints, identities, and cloud apps.

Responsibilities

• Administer and support Defender Suite: MDE/MDI/MDCA.
• Tune policies and monitor threats; manage endpoint protection.
• Monitor Proofpoint for phishing and BEC threats; coordinate response.

Skills

MDE administration

MDI administration

MDCA administration

Security Incident Response

Threat Hunting

EDR

SIEM/SOAR integration

Windows Server Security

Email Security

Threat monitoring & triage

Tools

CrowdStrike Falcon

Proofpoint

Microsoft Sentinel

Job description

Microsoft Defender & Endpoint Security Lead

Calgary, Onsite 5 days/wk

Full Time

We require a strong hands‑on security professional with proven administrative experience in MDE, MDI, and MDCA, including platform configuration, policy management, troubleshooting, and operational support. However, most of the profiles uploaded so far have primarily worked as SOC Analysts and lack the desired hands‑on administration and engineering experience with these tools.

Kindly refer below for required technical skills and key responsibilities:

Required Technical Skills

• Microsoft Defender for Endpoint (MDE)
• Microsoft Defender for Identity (MDI)
• Microsoft Defender for Cloud Apps (MDCA)
• Security Incident Investigation and Response
• Threat Hunting and Threat Intelligence
• Endpoint Detection & Response (EDR)
• SIEM/SOAR integration knowledge (Microsoft Sentinel preferred)
• Windows Server and Active Directory Security
• Email Security and Anti‑Phishing Controls
• Security Monitoring and Alert Triage

Key Responsibilities

• Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).
• Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.
• Monitor and administer Proofpoint email security solutions to protect against phishing, malware, and business email compromise attacks.
• Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
• Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
• Fine‑tune detection rules and security policies to reduce false positives and improve security visibility.
• Integrate security tools with SIEM platforms such as Microsoft Sentinel.
• Develop and maintain security monitoring dashboards, reports, and operational documentation.
• Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
• Support vulnerability management and security compliance initiatives.