Microsoft Defender Suite Admin

LanceSoft, Inc.; Calgary; On-site; CAD 110,000 - 140,000; Full time

Job summary

LanceSoft, Inc. in Calgary, Alberta, is seeking an experienced Security Tools Team Lead to oversee administration, optimization, and continuous improvement of enterprise cybersecurity platforms.

You will lead a team of security specialists, manage daily operations, drive cybersecurity initiatives, and collaborate with SOC, Infrastructure, Cloud, and Business teams to strengthen the organization's security posture.

Qualifications

• Experience leading a security tools or operations team.
• Deep expertise with CrowdStrike Falcon, MDE, MDI, MDCA, and Proofpoint.
• Strong collaboration with SOC, Infrastructure, Cloud, and Business teams.

Responsibilities

• Administer and supportMicrosoft Defender Suite (MDE, MDI, MDCA).
• Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.
• Monitor Proofpoint email security to protect against phishing, malware, and business email compromise attacks.
• Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
• Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
• Fine-tune detection rules and security policies to reduce false positives and improve security visibility.
• Integrate security tools with SIEM platforms such as Microsoft Sentinel.
• Develop and maintain security monitoring dashboards, reports, and operational documentation.
• Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
• Support vulnerability management and security compliance initiatives

Skills

Leadership

Incident response leadership

Threat hunting

Stakeholder management

Cross-functional collaboration

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

Microsoft Defender for Identity

Microsoft Defender for Cloud Apps

Proofpoint Email Security

Job description

We are seeking an experienced and highly motivated Security Tools Team Lead to lead the administration, optimization, and continuous improvement of enterprise cybersecurity platforms. The role requires deep expertise in CrowdStrike EDR, Microsoft Defender for Endpoint (MDE), Microsoft Defender for Identity (MDI), Microsoft Defender for Cloud Apps (MDCA), and Proofpoint Email Security. The successful candidate will lead a team of security specialists, manage daily operations, drive cybersecurity initiatives, support incident response activities, and collaborate closely with SOC, Infrastructure, Cloud, and Business teams.

The ideal candidate will possess strong technical expertise, leadership capabilities, stakeholder management skills, and a proactive mindset focused on enhancing the organization's security posture.

Key Responsibilities

• Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).
• Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.
• Monitor and administer Proofpoint email security solutions to protect against phishing, malware, and business email compromise attacks.
• Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
• Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
• Fine-tune detection rules and security policies to reduce false positives and improve security visibility.
• Integrate security tools with SIEM platforms such as Microsoft Sentinel.
• Develop and maintain security monitoring dashboards, reports, and operational documentation.
• Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
• Support vulnerability management and security compliance initiatives