Microsoft Defender administration and endpoint security define this onsite Calgary position, requiring hands-on MDE, MDI, and MDCA experience. Full time work is performed onsite five days weekly.
The Microsoft Defender & Endpoint Security Lead configures platforms, manages policies, troubleshoots issues, and provides operational support. The role emphasizes administrative and engineering experience rather than primarily SOC Analyst experience. Responsibilities span CrowdStrike Falcon, Proofpoint, incident response, threat hunting, and SIEM integration.
Key Responsibilities: Administer and support MDE, MDI, and MDCA platforms
Manage CrowdStrike Falcon policies, detection, and endpoint protection
Monitor Proofpoint against phishing, malware, and business email compromise
Investigate incidents,



determine root causes, and recommend remediation
Fine tune detection rules and security policies
Requirements: Proven hands-on administrative experience with MDE, MDI, and MDCA
Security incident investigation and response experience
Threat hunting and threat intelligence knowledge
EDR and SIEM/SOAR integration knowledge
Microsoft Sentinel, Windows Server, and Active Directory security knowledge
Apply endpoint engineering expertise across Microsoft Defender, CrowdStrike Falcon, Proofpoint, incident response, and security monitoring.

#J-18808-Ljbffr

📌 Microsoft Defender Endpoint Security Lead (Alberta)
🏢 Epsilon Solutions
📍 Alberta