Microsoft Defender administration and endpoint security define this onsite Calgary position, requiring hands-on MDE, MDI, and MDCA experience. Full time work is performed onsite five days weekly.

The Microsoft Defender & Endpoint Security Lead configures platforms, manages policies, troubleshoots issues, and provides operational support. The role emphasizes administrative and engineering experience rather than primarily SOC Analyst experience.

Responsibilities span CrowdStrike Falcon, Proofpoint, incident response, threat hunting, and SIEM integration.

Key Responsibilities

Administer and support MDE, MDI, and MDCA platforms

Manage CrowdStrike Falcon policies, detection, and endpoint protection

Monitor Proofpoint against phishing, malware, and business email compromise

Investigate incidents,



determine root causes, and recommend remediation

Fine tune detection rules and security policies

Requirements

Proven hands-on administrative experience with MDE, MDI, and MDCA

Security incident investigation and response experience

Threat hunting and threat intelligence knowledge

EDR and SIEM/SOAR integration knowledge

Microsoft Sentinel, Windows Server, and Active Directory security knowledge

Apply endpoint engineering expertise across Microsoft Defender, CrowdStrike Falcon, Proofpoint, incident response, and security monitoring.

📌 Microsoft Defender Endpoint Security Lead (Winnipeg)
🏢 Epsilon Solutions
📍 Winnipeg