09 Nov
|
Astra North Infoteck
|
Calgary
09 Nov
Astra North Infoteck
Calgary
CrowdStrike Falcon
Proofpoint Email Security
Security Incident Investigation and Response
Threat Hunting and Threat Intelligence
SIEM/SOAR integration knowledge (Microsoft Sentinel preferred)
Windows Server and Active Directory Security
Email Security and Anti-Phishing Controls
Security Monitoring and Alert Triage
Key Responsibilities
Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).
Manage CrowdStrike Falcon platform including policy tuning, threat detection, and endpoint protection.
Monitor and administer Proofpoint email security solutions to protect against phishing, malware, and business email compromise attacks.
Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
Conduct proactive threat hunting across endpoints, identities, cloud applications, and email settings.
Fine-tune detection rules and security policies to reduce false positives and improve security visibility.
Integrate security tools with SIEM platforms such as Microsoft Sentinel.
Develop and maintain security monitoring dashboards, reports, and operational documentation.
Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
Support vulnerability management and security compliance initiatives.
📌 Csp Tools Tower Lead Calgary
🏢 Astra North Infoteck
📍 Calgary