Job title: CSP Tools Tower Lead

Location: Calgary

Work Model: Onsite 5 days/wk

Required Technical Skills

- Microsoft Defender for Endpoint (MDE)

- Microsoft Defender for Identity (MDI)

- Microsoft Defender for Cloud Apps (MDCA)

- CrowdStrike Falcon

- Proofpoint Email Security

- Security Incident Investigation and Response

- Threat Hunting and Threat Intelligence

- Endpoint Detection & Response (EDR)

- SIEM/SOAR integration knowledge (Microsoft Sentinel preferred)

- Windows Server and Active Directory Security

- Email Security and Anti-Phishing Controls

- Security Monitoring and Alert Triage

Key Responsibilities

- Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).

- Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.

- Monitor and administer Proofpoint email security solutions to protect against phishing, malware,



and business email compromise attacks.

- Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.

- Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.

- Fine-tune detection rules and security policies to reduce false positives and improve security visibility.

- Integrate security tools with SIEM platforms such as Microsoft Sentinel.

- Develop and maintain security monitoring dashboards, reports, and operational documentation.

- Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.

- Support vulnerability management and security compliance initiatives.

📌 CSP Tools Tower Lead (Calgary)
🏢 Astra North Infoteck
📍 Calgary