Role: Cybersecurity Technical Lead - CrowdStrike, Proofpoint, MDE, MDI, and MDCA Calgary - Onsite
Primary Skillset
• Microsoft Defender for Endpoint (MDE)
• Microsoft Defender for Identity (MDI)
• Microsoft Defender for Cloud Apps (MDCA)
Secondary Skillset
• CrowdStrike EDR
• Proofpoint Email Security
Job Summary
• We are seeking an experienced and highly motivated Security Tools Team Lead to lead the administration, optimization, and continuous improvement of enterprise cybersecurity platforms.
• The role requires deep expertise in CrowdStrike EDR, Microsoft Defender for Endpoint (MDE), Microsoft Defender for Identity (MDI), Microsoft Defender for Cloud Apps (MDCA), and Proofpoint Email Security.
• The successful candidate will lead a team of security specialists, manage daily operations, drive cybersecurity initiatives, support incident response activities, and collaborate closely with SOC, Infrastructure, Cloud, and Business teams.
• The ideal candidate will possess strong technical expertise, leadership capabilities, stakeholder management skills, and a proactive mindset focused on enhancing the organization's security posture.
Key Responsibilities
Security Tools Leadership & Operations
• Lead the Security Tools team responsible for endpoint, email, identity, and cloud security technologies.
• Provide technical leadership, mentoring, and guidance to team members.
• Ensure operational excellence and availability of all security platforms.
• Manage day-to-day administration, configuration, maintenance, and optimization of security tools.
• Develop and maintain operational procedures, SOPs, and knowledge articles.
• Drive service improvements and automation initiatives.
Endpoint Security Management
• Manage and administer CrowdStrike EDR.
• Manage and administer Microsoft Defender for Endpoint (MDE).
• Oversee agent deployment, sensor health, policy management, exclusions, detections, and preventive controls.
• Drive endpoint hardening initiatives and security posture improvements.
• Monitor security recommendations and remediation activities.
Email Security Administration
• Administer and support Proofpoint Email Protection.
• Administer and support Proofpoint TAP.
• Administer and support Proofpoint TRAP.
• Manage phishing protection, email authentication, mail flow security, URL defense, attachment defense, and threat remediation.
• Review and implement policy updates, safe sender lists, and threat intelligence recommendations.
Identity & Cloud Security
• Manage Microsoft Defender for Identity (MDI).
• Manage Microsoft Defender for Cloud Apps (MDCA).
• Monitor identity-based threats, cloud application risks, suspicious activities, and compliance alerts.
• Collaborate with IAM, Azure, and Cloud teams for remediation activities.
Incident Response & Threat Management
• Act as an escalation point for critical security incidents.
• Support SOC investigations involving endpoint, email, cloud, and identity threats.
• Conduct threat hunting and root cause analysis.
• Ensure timely containment, eradication, and recovery activities.
Governance & Reporting
• Own weekly, monthly, and quarterly security reporting.
• Develop KPI and SLA dashboards for security tool operations.
• Present operational updates, risks, and improvement plans to customers and senior management.
• Maintain risk registers and track remediation activities.
Stakeholder & Vendor Management
• Partner with internal security teams, infrastructure teams, and business stakeholders.
• Engage with Microsoft, CrowdStrike, and Proofpoint support teams for issue resolution.
• Participate in architecture reviews and security enhancement initiatives.
Team Management
• Manage resource planning, workload distribution, and shift coverage.
• Conduct performance coaching, mentoring, and technical reviews.
• Drive skill development and certification initiatives.
• Ensure adequate backup coverage and succession planning.
Required Technical Skills
Endpoint Security
• CrowdStrike EDR
• Microsoft Defender for Endpoint (MDE)
• Endpoint Threat Detection & Response
• Vulnerability Management
Email Security
• Proofpoint Email Protection
• Proofpoint TAP
• Proofpoint TRAP
• Anti-Phishing Technologies
• SPF, DKIM, DMARC
Identity & Cloud Security
• Microsoft Defender for Identity (MDI)
• Microsoft Defender for Cloud Apps (MDCA)
• Microsoft Entra ID / Azure AD
• Identity Threat Detection
Security Operations
• Incident Response
• Threat Hunting
• Security Monitoring
• Cyber Threat Intelligence
• Security Governance
Additional Skills
• PowerShell Automation
• Microsoft Security Portal
• SIEM Integration
• ServiceNow
• Azure Security Services
Experience & Qualifications
Required
• Degree in Computer Science, Cyber Security, Information Technology, or a related discipline.
• 8+ years of cybersecurity experience.
• Minimum 5+ years leading security tools teams.
• Strong hands-on experience with CrowdStrike, Proofpoint, MDE, MDI, and MDCA.
• Experience supporting enterprise-scale environments.
• Excellent communication and stakeholder management skills.
Preferred Certifications
• CrowdStrike Administrator
• Microsoft Certified: Security Operations Analyst (SC-200)
• Microsoft Certified: Identity & Access Administrator (SC-300)
• Microsoft Certified: Security Administrator (SC-100 / AZ-500)
Preferred Candidate Profile
• Strong customer-facing experience.
• Ability to work in a fast-paced operational environment.
• Demonstrated ability to drive proactive security improvements.
• Strong analytical, troubleshooting, and leadership capabilities.
• Willingness to work from Calgary, Alberta, Canada and participate in on-call support when required.