Enter a job title or keyword

Cybersecurity Technical Lead CrowdStrike, Proofpoint, MDE, MDI, and MDCA


Job Location:

Calgary - Canada

Monthly Salary: K 10 - 10
Experience Required: 5years
Posted: 10 September 2026 (5 days ago)
Application Deadline: 8 December 2026
Vacancies: 1 Vacancy

Job Summary

Role: Cybersecurity Technical Lead - CrowdStrike Proofpoint MDE MDI and MDCA Calgary - Onsite


Primary Skillset
Microsoft Defender for Endpoint (MDE)
Microsoft Defender for Identity (MDI)
Microsoft Defender for Cloud Apps (MDCA)

Secondary Skillset
CrowdStrike EDR
Proofpoint Email Security

Job Summary
We are seeking an experienced and highly motivated Security Tools Team Lead to lead the administration optimization and continuous improvement of enterprise cybersecurity platforms.
The role requires deep expertise in CrowdStrike EDR Microsoft Defender for Endpoint (MDE) Microsoft Defender for Identity (MDI) Microsoft Defender for Cloud Apps (MDCA) and Proofpoint Email Security.
The successful candidate will lead a team of security specialists manage daily operations drive cybersecurity initiatives support incident response activities and collaborate closely with SOC Infrastructure Cloud and Business teams.
The ideal candidate will possess strong technical expertise leadership capabilities stakeholder management skills and a proactive mindset focused on enhancing the organizations security posture.

Key Responsibilities

Security Tools Leadership & Operations
Lead the Security Tools team responsible for endpoint email identity and cloud security technologies.
Provide technical leadership mentoring and guidance to team members.
Ensure operational excellence and availability of all security platforms.
Manage day-to-day administration configuration maintenance and optimization of security tools.
Develop and maintain operational procedures SOPs and knowledge articles.
Drive service improvements and automation initiatives.

Endpoint Security Management
Manage and administer CrowdStrike EDR.
Manage and administer Microsoft Defender for Endpoint (MDE).
Oversee agent deployment sensor health policy management exclusions detections and preventive controls.
Drive endpoint hardening initiatives and security posture improvements.
Monitor security recommendations and remediation activities.

Email Security Administration
Administer and support Proofpoint Email Protection.
Administer and support Proofpoint TAP.
Administer and support Proofpoint TRAP.
Manage phishing protection email authentication mail flow security URL defense attachment defense and threat remediation.
Review and implement policy updates safe sender lists and threat intelligence recommendations.

Identity & Cloud Security
Manage Microsoft Defender for Identity (MDI).
Manage Microsoft Defender for Cloud Apps (MDCA).
Monitor identity-based threats cloud application risks suspicious activities and compliance alerts.
Collaborate with IAM Azure and Cloud teams for remediation activities.

Incident Response & Threat Management
Act as an escalation point for critical security incidents.
Support SOC investigations involving endpoint email cloud and identity threats.
Conduct threat hunting and root cause analysis.
Ensure timely containment eradication and recovery activities.

Governance & Reporting
Own weekly monthly and quarterly security reporting.
Develop KPI and SLA dashboards for security tool operations.
Present operational updates risks and improvement plans to customers and senior management.
Maintain risk registers and track remediation activities.

Stakeholder & Vendor Management
Partner with internal security teams infrastructure teams and business stakeholders.
Engage with Microsoft CrowdStrike and Proofpoint support teams for issue resolution.
Participate in architecture reviews and security enhancement initiatives.

Team Management
Manage resource planning workload distribution and shift coverage.
Conduct performance coaching mentoring and technical reviews.
Drive skill development and certification initiatives.
Ensure adequate backup coverage and succession planning.

Required Technical Skills

Endpoint Security
CrowdStrike EDR
Microsoft Defender for Endpoint (MDE)
Endpoint Threat Detection & Response
Vulnerability Management

Email Security
Proofpoint Email Protection
Proofpoint TAP
Proofpoint TRAP
Anti-Phishing Technologies
SPF DKIM DMARC

Identity & Cloud Security
Microsoft Defender for Identity (MDI)
Microsoft Defender for Cloud Apps (MDCA)
Microsoft Entra ID / Azure AD
Identity Threat Detection

Security Operations
Incident Response
Threat Hunting
Security Monitoring
Cyber Threat Intelligence
Security Governance

Additional Skills
PowerShell Automation
Microsoft Security Portal
SIEM Integration
ServiceNow
Azure Security Services

Experience & Qualifications

Required
Degree in Computer Science Cyber Security Information Technology or a related discipline.
8 years of cybersecurity experience.
Minimum 5 years leading security tools teams.
Strong hands-on experience with CrowdStrike Proofpoint MDE MDI and MDCA.
Experience supporting enterprise-scale environments.
Excellent communication and stakeholder management skills.

Preferred Certifications
CrowdStrike Administrator
Microsoft Certified: Security Operations Analyst (SC-200)
Microsoft Certified: Identity & Access Administrator (SC-300)
Microsoft Certified: Security Administrator (SC-100 / AZ-500)

Preferred Candidate Profile
Strong customer-facing experience.
Ability to work in a fast-paced operational environment.
Demonstrated ability to drive proactive security improvements.
Strong analytical troubleshooting and leadership capabilities.
Willingness to work from Calgary Alberta Canada and participate in on-call support when required.