Cybersecurity Technical Lead - CrowdStrike, Proofpoint, MDE, MDI, and MDCA

Role: Cybersecurity Technical Lead - CrowdStrike, Proofpoint, MDE, MDI, and MDCA Calgary - Onsite

Primary Skillset

• Microsoft Defender for Endpoint (MDE)

• Microsoft Defender for Identity (MDI)

• Microsoft Defender for Cloud Apps (MDCA)

Secondary Skillset

• CrowdStrike EDR

• Proofpoint Email Security

Job Summary

• We are seeking an experienced and highly motivated Security Tools Team Lead to lead the administration, optimization, and continuous improvement of enterprise cybersecurity platforms.

• The role requires deep expertise in CrowdStrike EDR, Microsoft Defender for Endpoint (MDE), Microsoft Defender for Identity (MDI), Microsoft Defender for Cloud Apps (MDCA), and Proofpoint Email Security.

• The successful candidate will lead a team of security specialists, manage daily operations, drive cybersecurity initiatives, support incident response activities, and collaborate closely with SOC, Infrastructure, Cloud, and Business teams.

• The ideal candidate will possess strong technical expertise, leadership capabilities, stakeholder management skills, and a proactive mindset focused on enhancing the organization's security posture.

Key Responsibilities

Security Tools Leadership & Operations

• Lead the Security Tools team responsible for endpoint, email, identity, and cloud security technologies.

• Provide technical leadership, mentoring, and guidance to team members.

• Ensure operational excellence and availability of all security platforms.

• Manage day-to-day administration, configuration, maintenance, and optimization of security tools.

• Develop and maintain operational procedures, SOPs, and knowledge articles.

• Drive service improvements and automation initiatives.

Endpoint Security Management

• Manage and administer CrowdStrike EDR.

• Manage and administer Microsoft Defender for Endpoint (MDE).

• Oversee agent deployment, sensor health, policy management, exclusions, detections, and preventive controls.

• Drive endpoint hardening initiatives and security posture improvements.

• Monitor security recommendations and remediation activities.

Email Security Administration

• Administer and support Proofpoint Email Protection.

• Administer and support Proofpoint TAP.

• Administer and support Proofpoint TRAP.

• Manage phishing protection, email authentication, mail flow security, URL defense, attachment defense, and threat remediation.

• Review and implement policy updates, safe sender lists, and threat intelligence recommendations.

Identity & Cloud Security

• Manage Microsoft Defender for Identity (MDI).

• Manage Microsoft Defender for Cloud Apps (MDCA).

• Monitor identity-based threats, cloud application risks, suspicious activities, and compliance alerts.

• Collaborate with IAM, Azure, and Cloud teams for remediation activities.

Incident Response & Threat Management

• Act as an escalation point for critical security incidents.

• Support SOC investigations involving endpoint, email, cloud, and identity threats.

• Conduct threat hunting and root cause analysis.

• Ensure timely containment, eradication, and recovery activities.

Governance & Reporting

• Own weekly, monthly, and quarterly security reporting.

• Develop KPI and SLA dashboards for security tool operations.

• Present operational updates, risks, and improvement plans to customers and senior management.

• Maintain risk registers and track remediation activities.

Stakeholder & Vendor Management

• Partner with internal security teams, infrastructure teams, and business stakeholders.

• Engage with Microsoft, CrowdStrike, and Proofpoint support teams for issue resolution.

• Participate in architecture reviews and security enhancement initiatives.

Team Management

• Manage resource planning, workload distribution, and shift coverage.

• Conduct performance coaching, mentoring, and technical reviews.

• Drive skill development and certification initiatives.

• Ensure adequate backup coverage and succession planning.

Required Technical Skills

Endpoint Security

• CrowdStrike EDR

• Microsoft Defender for Endpoint (MDE)

• Endpoint Threat Detection & Response

• Vulnerability Management

Email Security

• Proofpoint Email Protection

• Proofpoint TAP

• Proofpoint TRAP

• Anti-Phishing Technologies

• SPF, DKIM, DMARC

Identity & Cloud Security

• Microsoft Defender for Identity (MDI)

• Microsoft Defender for Cloud Apps (MDCA)

• Microsoft Entra ID / Azure AD

• Identity Threat Detection

Security Operations

• Incident Response

• Threat Hunting

• Security Monitoring

• Cyber Threat Intelligence

• Security Governance

Additional Skills

• PowerShell Automation

• Microsoft Security Portal

• SIEM Integration

• ServiceNow

• Azure Security Services

Experience & Qualifications

Required

• Degree in Computer Science, Cyber Security, Information Technology, or a related discipline.

• 8+ years of cybersecurity experience.

• Minimum 5+ years leading security tools teams.

• Strong hands-on experience with CrowdStrike, Proofpoint, MDE, MDI, and MDCA.

• Experience supporting enterprise-scale environments.

• Excellent communication and stakeholder management skills.

Preferred Certifications

• CrowdStrike Administrator

• Microsoft Certified: Security Operations Analyst (SC-200)

• Microsoft Certified: Identity & Access Administrator (SC-300)

• Microsoft Certified: Security Administrator (SC-100 / AZ-500)

Preferred Candidate Profile

• Strong customer-facing experience.

• Ability to work in a fast-paced operational environment.

• Demonstrated ability to drive proactive security improvements.

• Strong analytical, troubleshooting, and leadership capabilities.

• Willingness to work from Calgary, Alberta, Canada and participate in on-call support when required.