Cybersecurity Technical Lead - CrowdStrike, Proofpoint, MDE, MDI, and MDCA

Résumé du poste

Lead the Security Tools team in the administration, optimization, and continuous improvement of enterprise cybersecurity platforms. Manage endpoint, email, identity, and cloud security technologies while supporting incident response and SOC investigations.

Détails du poste

Role: Cybersecurity Technical Lead - CrowdStrike, Proofpoint, MDE, MDI, and MDCA Calgary - Onsite Primary Skillset • Microsoft Defender for Endpoint (MDE) • Microsoft Defender for Identity (MDI) • Microsoft Defender for Cloud Apps (MDCA) Secondary Skillset • CrowdStrike EDR • Proofpoint Email Security Job Summary • We are seeking an experienced and highly motivated Security Tools Team Lead to lead the administration, optimization, and continuous improvement of enterprise cybersecurity platforms. • The role requires deep expertise in CrowdStrike EDR, Microsoft Defender for Endpoint (MDE), Microsoft Defender for Identity (MDI), Microsoft Defender for Cloud Apps (MDCA), and Proofpoint Email Security. • The successful candidate will lead a team of security specialists, manage daily operations, drive cybersecurity initiatives, support incident response activities, and collaborate closely with SOC, Infrastructure, Cloud, and Business teams. • The ideal candidate will possess strong technical expertise, leadership capabilities, stakeholder management skills, and a proactive mindset focused on enhancing the organization's security posture. Key Responsibilities Security Tools Leadership & Operations • Lead the Security Tools team responsible for endpoint, email, identity, and cloud security technologies. • Provide technical leadership, mentoring, and guidance to team members. • Ensure operational excellence and availability of all security platforms. • Manage day-to-day administration, configuration, maintenance, and optimization of security tools. • Develop and maintain operational procedures, SOPs, and knowledge articles. • Drive service improvements and automation initiatives. Endpoint Security Management • Manage and administer CrowdStrike EDR. • Manage and administer Microsoft Defender for Endpoint (MDE). • Oversee agent deployment, sensor health, policy management, exclusions, detections, and preventive controls. • Drive endpoint hardening initiatives and security posture improvements. • Monitor security recommendations and remediation activities. Email Security Administration • Administer and support Proofpoint Email Protection. • Administer and support Proofpoint TAP. • Administer and support Proofpoint TRAP. • Manage phishing protection, email authentication, mail flow security, URL defense, attachment defense, and threat remediation. • Review and implement policy updates, safe sender lists, and threat intelligence recommendations. Identity & Cloud Security • Manage Microsoft Defender for Identity (MDI). • Manage Microsoft Defender for Cloud Apps (MDCA). • Monitor identity-based threats, cloud application risks, suspicious activities, and compliance alerts. • Collaborate with IAM, Azure, and Cloud teams for remediation activities. Incident Response & Threat Management • Act as an escalation point for critical security incidents. • Support SOC investigations involving endpoint, email, cloud, and identity threats. • Conduct threat hunting and root cause analysis. • Ensure timely containment, eradication, and recovery activities. Governance & Reporting • Own weekly, monthly, and quarterly security reporting. • Develop KPI and SLA dashboards for security tool operations. • Present operational updates, risks, and improvement plans to customers and senior management. • Maintain risk registers and track remediation activities. Stakeholder & Vendor Management • Partner with internal security teams, infrastructure teams, and business stakeholders. • Engage with Microsoft, CrowdStrike, and Proofpoint support teams for issue resolution. • Participate in architecture reviews and security enhancement initiatives. Team Management • Manage resource planning, workload distribution, and shift coverage. • Conduct performance coaching, mentoring, and technical reviews. • Drive skill development and certification initiatives. • Ensure adequate backup coverage and succession planning. Required Technical Skills Endpoint Security • CrowdStrike EDR • Microsoft Defender for Endpoint (MDE) • Endpoint Threat Detection & Response • Vulnerability Management Email Security • Proofpoint Email Protection • Proofpoint TAP • Proofpoint TRAP • Anti-Phishing Technologies • SPF, DKIM, DMARC Identity & Cloud Security • Microsoft Defender for Identity (MDI) • Microsoft Defender for Cloud Apps (MDCA) • Microsoft Entra ID / Azure AD • Identity Threat Detection Security Operations • Incident Response • Threat Hunting • Security Monitoring • Cyber Threat Intelligence • Security Governance Additional Skills • PowerShell Automation • Microsoft Security Portal • SIEM Integration • ServiceNow • Azure Security Services Experience & Qualifications Required • Degree in Computer Science, Cyber Security, Information Technology, or a related discipline. • 8+ years of cybersecurity experience. • Minimum 5+ years leading security tools teams. • Strong hands-on experience with CrowdStrike, Proofpoint, MDE, MDI, and MDCA. • Experience supporting enterprise-scale environments. • Excellent communication and stakeholder management skills. Preferred Certifications • CrowdStrike Administrator • Microsoft Certified: Security Operations Analyst (SC-200) • Microsoft Certified: Identity & Access Administrator (SC-300) • Microsoft Certified: Security Administrator (SC-100 / AZ-500) Preferred Candidate Profile • Strong customer-facing experience. • Ability to work in a fast-paced operational environment. • Demonstrated ability to drive proactive security improvements. • Strong analytical, troubleshooting, and leadership capabilities. • Willingness to work from Calgary, Alberta, Canada and participate in on-call support when required.

Ce que vous ferez

Lead the Security Tools team in the administration, optimization, and continuous improvement of enterprise cybersecurity platforms. Manage endpoint, email, identity, and cloud security technologies while supporting incident response and SOC investigations.

Exigences

Requires a degree in Computer Science or a related field with over 8 years of cybersecurity experience, including 5+ years in a leadership role. Must have deep technical expertise in CrowdStrike, Proofpoint, and the Microsoft Defender suite.

Compétences indiquées

• Team Leadership · Souhaitée
• Stakeholder Management · Souhaitée

Autres compétences pertinentes

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• Microsoft Defender for Endpoint
• Microsoft Defender for Identity
• Microsoft Defender for Cloud Apps
• CrowdStrike EDR
• Proofpoint Email Security
• Incident Response
• Threat Hunting
• Identity & Access Management
• PowerShell Automation
• Vulnerability Management
• Security Governance
• Stakeholder Management
• Team Leadership
• SIEM Integration
• Azure Security Services
• Endpoint Hardening

Domaines d’emploi

• Security & Safety
• Technology
• Management & Leadership
• Consulting
• Software