Job Description Role: Cybersecurity Technical Lead - Crowd

Strike, Proofpoint, MDE, MDI, and MDCA Calgary - Onsite Primary Skillset Microsoft Defender for Endpoint (MDE) Microsoft Defender for Identity (MDI) Microsoft Defender for Cloud Apps (MDCA) Secondary Skillset Crowd

Strike EDR Proofpoint Email Security Job Summary We are seeking an experienced and highly motivated Security Tools Team Lead to lead the administration, optimization, and continuous improvement of enterprise cybersecurity platforms.

The role requires deep expertise in Crowd

Strike EDR, Microsoft Defender for Endpoint (MDE), Microsoft Defender for Identity (MDI), Microsoft Defender for Cloud Apps (MDCA), and Proofpoint Email Security.

The successful candidate will lead a team of security specialists, manage daily operations, drive cybersecurity initiatives, support incident response activities, and collaborate closely with SOC, Infrastructure, Cloud, and Business teams.

The ideal candidate will possess strong technical expertise, leadership capabilities, stakeholder management skills, and a proactive mindset focused on enhancing the organization''s security posture.

Key Responsibilities Security Tools Leadership & Operations Lead the Security Tools team responsible for endpoint, email, identity, and cloud security technologies.

Provide technical leadership, mentoring, and guidance to team members.

Ensure operational excellence and availability of all security platforms.

Manage day-to-day administration, configuration, maintenance, and optimization of security tools.

Develop and maintain operational procedures, SOPs, and knowledge articles.

Drive service improvements and automation initiatives.

Endpoint Security Management Manage and administer Crowd

Strike EDR.

Manage and administer Microsoft Defender for Endpoint (MDE).

Oversee agent deployment, sensor health, policy management, exclusions, detections, and preventive controls.

Drive endpoint hardening initiatives and security posture improvements.





Monitor security recommendations and remediation activities.

Email Security Administration Administer and support Proofpoint Email Protection.

Administer and support Proofpoint TAP.

Administer and support Proofpoint TRAP.

Manage phishing protection, email authentication, mail flow security, URL defense, attachment defense, and threat remediation.

Review and implement policy updates, safe sender lists, and threat intelligence recommendations.

Identity & Cloud Security Manage Microsoft Defender for Identity (MDI).

Manage Microsoft Defender for Cloud Apps (MDCA).

Monitor identity-based threats, cloud application risks, suspicious activities, and compliance alerts.

Collaborate with IAM, Azure, and Cloud teams for remediation activities.

Incident Response & Threat Management Act as an escalation point for critical security incidents.

Support SOC investigations involving endpoint, email, cloud, and identity threats.

Conduct threat hunting and root cause analysis.

Ensure timely containment, eradication, and recovery activities.

Governance & Reporting Own weekly, monthly, and quarterly security reporting.

Develop KPI and SLA dashboards for security tool operations.

Present operational updates, risks, and improvement plans to customers and senior management.

Maintain risk registers and track remediation activities.

Stakeholder & Vendor Management Partner with internal security teams, infrastructure teams, and business stakeholders.

Engage with Microsoft, Crowd

Strike, and Proofpoint support teams for issue resolution.

Participate in architecture reviews and security enhancement initiatives.





Team Management Manage resource planning, workload distribution, and shift coverage.

Conduct performance coaching, mentoring, and technical reviews.

Drive skill development and certification initiatives.

Ensure adequate backup coverage and succession planning.

Required Technical Skills Endpoint Security Crowd

Strike EDR Microsoft Defender for Endpoint (MDE) Endpoint Threat Detection & Response Vulnerability Management Email Security Proofpoint Email Protection Proofpoint TAP Proofpoint TRAP Anti-Phishing Technologies SPF, DKIM, DMARC Identity & Cloud Security Microsoft Defender for Identity (MDI) Microsoft Defender for Cloud Apps (MDCA) Microsoft Entra ID / Azure AD Identity Threat Detection Security Operations Incident Response Threat Hunting Security Monitoring Cyber Threat Intelligence Security Governance Additional Skills Power

Shell Automation Microsoft Security Portal SIEM Integration Service

Now Azure Security Services Experience & Qualifications Required Degree in Computer Science, Cyber Security, Information Technology, or a related discipline. 8+ years of cybersecurity experience.

Minimum 5+ years leading security tools teams.

Strong hands-on experience with Crowd

Strike, Proofpoint, MDE, MDI, and MDCA.

Experience supporting enterprise-scale environments.

Excellent communication and stakeholder management skills.

Preferred Certifications Crowd

Strike Administrator Microsoft Certified: Security Operations Analyst (SC-200) Microsoft Certified: Identity & Access Administrator (SC-300) Microsoft Certified: Security Administrator (SC-100 / AZ-500) Preferred Candidate Profile Strong customer-facing experience.

Ability to work in a quick-paced operational environment.

Demonstrated ability to drive proactive security improvements.

Strong analytical, troubleshooting, and leadership capabilities.

Willingness to work from Calgary, Alberta, Canada and participate in on-call support when required.

📌 Cybersecurity Technical Lead - CrowdStrike, Proofpoint, MDE, MDI, and MDCA (Calgary)
🏢 Astra North Infoteck
📍 Calgary