Publié il y a 14 jours
Cybersecurity Tools Lead – Microsoft Defender (MDE, MDI, MDCA)
@ Astra North Infoteck Inc.
Calgary, Alberta
En bref
Astra North Infoteck Inc. is hiring a Cybersecurity Tools Lead to run the administration and improvement of enterprise security platforms, including Microsoft Defender (MDE, MDI, MDCA), CrowdStrike Falcon and Proofpoint. The role leads a team of security specialists, manages daily operations, supports incident response and threat hunting, and works with SOC, infrastructure and cloud teams.
Responsabilités :
- Administer and support Microsoft Defender suite (MDE, MDI, MDCA)
- Manage CrowdStrike Falcon policies and threat detection
- Monitor Proofpoint email security against phishing and BEC
- Investigate incidents and perform root cause analysis
- Lead threat hunting across endpoints, identities, cloud and email
Résumé des exigences :
- Deep expertise in Microsoft Defender, CrowdStrike and Proofpoint
- Incident response and threat hunting experience
- SIEM/SOAR integration knowledge, Microsoft Sentinel preferred
- Windows Server and Active Directory security
- Leadership and stakeholder management capabilities
Outils et compétences
Source et dates
Type de source non vérifié · zoho
- Date publiée par l’employeur
- 2026-10-27
- Première détection par notre source
- 2026-10-11
- Mise à jour du dossier source
- 2026-10-28
Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.
Détails du poste
| Niveau | Chef d’équipe |
| Domaine | TI |
| Gestion d’équipe | Oui |
| Milieu de travail | Bureau |
| Position | Surtout assis |
| Exigences physiques | physique faible · ordinateur élevé |
Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.
Astra North Infoteck Inc.
| Champ | Valeur |
|---|---|
| Offres sur Jobsy | 425 |
Cybersecurity Tools Lead – Microsoft Defender (MDE, MDI, MDCA)
Required Skillset
Microsoft Defender for Endpoint (MDE)
Microsoft Defender for Identity (MDI)
Microsoft Defender for Cloud Apps (MDCA)
CrowdStrike Falcon
Proofpoint Email Security
Security Incident Investigation and Response
Threat Hunting and Threat Intelligence
Endpoint Detection & Response (EDR)
SIEM/SOAR Integration Knowledge (Microsoft Sentinel preferred)
Windows Server and Active Directory Security
Email Security and Anti-Phishing Controls
Security Monitoring and Alert Triage
Job Summary
We are seeking an experienced and highly motivated Security Tools Team Lead to lead the administration, optimization, and continuous improvement of enterprise cybersecurity platforms.
The role requires deep expertise in CrowdStrike EDR, Microsoft Defender for Endpoint (MDE), Microsoft Defender for Identity (MDI), Microsoft Defender for Cloud Apps (MDCA), and Proofpoint Email Security.
The successful candidate will lead a team of security specialists, manage daily operations, drive cybersecurity initiatives, support incident response activities, and collaborate closely with SOC, Infrastructure, Cloud, and Business teams.
The ideal candidate will possess strong technical expertise, leadership capabilities, stakeholder management skills, and a proactive mindset focused on enhancing the organization's security posture.
Key Responsibilities
Administer and support Microsoft Defender Suite (MDE, MDI, MDCA).
Manage CrowdStrike Falcon platform, including policy tuning, threat detection, and endpoint protection.
Monitor and administer Proofpoint email security solutions to protect against phishing, malware, and business email compromise attacks.
Investigate security alerts and incidents, perform root cause analysis, and provide remediation recommendations.
Conduct proactive threat hunting across endpoints, identities, cloud applications, and email environments.
Fine-tune detection rules and security policies to reduce false positives and improve security visibility.
Integrate security tools with SIEM platforms such as Microsoft Sentinel.
Develop and maintain security monitoring dashboards, reports, and operational documentation.
Collaborate with infrastructure, application, and SOC teams during incident response and remediation activities.
Support vulnerability management and security compliance initiatives.
Journal
Visible seulement par vous. Conservé sur cet appareil, et dans votre compte une fois connecté.