Posted 5 days ago
CSP Tools Tower Lead
@ HRConnects
Calgary, Alberta
Overview
HRConnects is hiring a CSP Tools Tower Lead in Calgary, onsite, for a full-time role starting as soon as possible. The lead will administer and optimize security tools including Microsoft Defender, CrowdStrike Falcon and Proofpoint, while leading a team and supporting incident response. The posting states a salary of $130,000 to $140,000 per year.
Responsibilities:
- Administer Microsoft Defender, CrowdStrike Falcon and Proofpoint security platforms
- Investigate security alerts and conduct root cause analysis
- Perform proactive threat hunting across endpoints, identities, cloud and email
- Integrate security tools with Microsoft Sentinel and build dashboards
- Collaborate with SOC and infrastructure teams during incident response
Requirements summary:
- Hands-on experience with Microsoft Defender for Endpoint, Identity and Cloud Apps
- Strong operational skills with CrowdStrike Falcon
- Experience with Proofpoint email security
- Knowledge of incident investigation, threat hunting and EDR
- Familiarity with SIEM/SOAR integration, especially Microsoft Sentinel
Tools & skills
Source and dates
Source type not verified · apify-linkedin
- Employer posting date
- 2026-11-08
- First seen by our source
- 2026-11-14
- Source record updated
- 2026-11-14
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Lead |
| Department | IT |
| Manages people | Yes |
| Hours per week | 40 (estimated) |
| Travel | air: none · ground: none |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
Summary and details written by AI from the posting; the employer’s posting is the authority.
HRConnects
| Field | Value |
|---|---|
| Open jobs on Jobsy | 5 |
Overview
As the CSP Tools Tower Lead, you will be at the forefront of security operations, directly managing and optimizing essential tools that safeguard critical infrastructure. You'll lead a skilled team, ensure seamless platform administration, and play a pivotal role in strengthening our security posture. This is a unique opportunity to leverage your technical expertise in a dynamic setting that values innovation and teamwork.
Start Date: ASAP
Location: Calgary - onsite
Salary: $130 000- 140 000/ yr
Key Responsibilities
- Administer and support the Microsoft Defender Suite (MDE, MDI, MDCA) to ensure robust protection across endpoints, identities, and cloud apps.
- Manage the CrowdStrike Falcon platform, fine-tuning policies, detecting threats, and maintaining endpoint defenses.
- Monitor and enhance Proofpoint email security solutions to defend against phishing, malware, and email-based attacks.
- Investigate security alerts and incidents, conduct root cause analysis, and recommend effective remediation strategies.
- Perform proactive threat hunting across endpoints, identities, cloud environments, and email channels to identify vulnerabilities and new attack vectors.
- Refine detection rules and security policies to reduce false positives and enhance visibility.
- Integrate security tools with SIEM platforms such as Microsoft Sentinel, developing dashboards and operational documentation.
- Collaborate with infrastructure, application, and SOC teams during incident response activities.
- Support vulnerability management initiatives and ensure security compliance across the organization.
- Proven hands-on experience with Microsoft Defender for Endpoint, Identity, and Cloud Apps.
- Strong operational skills with CrowdStrike Falcon platform management.
- Experience with Proofpoint email security solutions.
- Knowledge of security incident investigation, threat hunting, and EDR techniques.
- Familiarity with SIEM/SOAR integration, especially with Microsoft Sentinel.
- Ability to troubleshoot, fine-tune security policies, and develop monitoring dashboards.
- Background in security incident response and remediation.
- Experience with Windows Server and Active Directory security.
- Familiarity with vulnerability management and security compliance initiatives.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.