Microsoft Defender Endpoint Security Lead

Microsoft Defender administration and endpoint security define this onsite Calgary position, requiring hands-on MDE, MDI, and MDCA experience. Full-time work is performed onsite five days weekly.

The Microsoft Defender & Endpoint Security Lead configures platforms, manages policies, troubleshoots issues, and provides operational support. The role emphasizes administrative and engineering experience rather than primarily SOC Analyst experience. Responsibilities span CrowdStrike Falcon, Proofpoint, incident response, threat hunting, and SIEM integration.

Key Responsibilities:

• Administer and support MDE, MDI, and MDCA platforms
• Manage CrowdStrike Falcon policies, detection, and endpoint protection
• Monitor Proofpoint against phishing, malware, and business email compromise
• Investigate incidents, determine root causes, and recommend remediation
• Fine tune detection rules and security policies

Requirements:

• Proven hands-on administrative experience with MDE, MDI, and MDCA
• Security incident investigation and response experience
• Threat hunting and threat intelligence knowledge
• EDR and SIEM/SOAR integration knowledge
• Microsoft Sentinel, Windows Server, and Active Directory security knowledge

Apply endpoint engineering expertise across Microsoft Defender, CrowdStrike Falcon, Proofpoint, incident response, and security monitoring.