Application Control Security Analyst

Ayan Infotech; Sydney; On-site; AUD 90,000 - 130,000; Full time

Job summary

Our client is a global enterprise seeking an Application Control Security Analyst to join the Security Governance team and support day-to-day operation and ongoing maturity of the capability.

You will review and manage application requests, assess software security risk and coordinate with Cyber Security, EUC, Server, Application Support, Packaging and other technology teams to ensure controlled deployment of approved applications.

Qualifications

• Experience with app control or allowlisting and endpoint security.
• Ability to assess software security risk and licensing considerations.
• Strong problem-solving, investigation and troubleshooting skills.
• Good understanding of Windows applications and software deployment.

Responsibilities

• Review, approve or deny application requests per security governance.
• Assess software risk, vendor reputation, business need and licensing.
• Create and maintain allow, block and exception rules.
• Investigate blocked apps and deployment issues.
• Coordinate with EUC, Server, Application Packaging and Cyber Security teams to resolve issues.
• Maintain records of decisions, exceptions and control changes.
• Monitor effectiveness of application control policies.
• Communicate decisions and outcomes to technical and business stakeholders.

Skills

App control

Risk assessment

Troubleshooting

Windows deployment

Tools

WDAC

AppLocker

Defender for Endpoint

Intune

SCCM/MECM

Airlock Digital

Job description

Our client is a global enterprise currently deploying an Application Control capability to strengthen cyber security, improve software governance and reduce risk across its end-user and server environments.

We are seeking an Application Control Security Analyst to join the Security Governance team and support the day-to-day operation and ongoing maturity of the capability.

About the Role

In this role, you will be responsible for reviewing and managing application requests, assessing software security risk, maintaining application control rules and coordinating with technical teams to safely deploy approved applications.

You will work closely with Cyber Security, EUC, Server, Application Support, Packaging and other technology teams to ensure applications are appropriately assessed, approved and controlled within the enterprise environment.

Key Responsibilities

• Review, assess, approve or deny application requests in accordance with security and governance requirements.
• Assess software for security risk, vulnerabilities, vendor reputation, business need and licensing considerations.
• Create and maintain application allow, block and exception rules.
• Investigate blocked applications, failed installations and application compatibility issues.
• Coordinate with EUC, Server, Application Support, Application Packaging and Cyber Security teams to resolve application control issues.
• Manage exceptions and support remediation of unapproved, vulnerable or high-risk software.
• Maintain accurate records of application decisions, exceptions, approvals and control changes.
• Monitor and support the ongoing effectiveness of application control policies.
• Communicate application control decisions and outcomes clearly to technical teams and business stakeholders.
• Contribute to continuous improvement of application control processes, standards and governance.

About You

We are looking for someone with experience in one or more of the following areas:

• Cyber Security
• Application Control / Application Whitelisting
• Endpoint Security
• EUC / Desktop Engineering
• Application Support
• Application Packaging
• Windows or Server Engineering

You will also have:

• An understanding of application control, allowlisting or endpoint security technologies.
• Experience assessing software or security risk.
• Strong problem-solving, troubleshooting and investigation skills.
• Good understanding of Windows applications and software deployment.
• Strong stakeholder management and communication skills.
• The ability to explain technical security decisions clearly to both technical and business audiences.
• Strong attention to detail and documentation skills.
• The ability to work collaboratively across security and technology teams.

Desirable Technical Experience

Experience with one or more of the following technologies will be highly regarded:

• Microsoft Defender Application Control (WDAC)
• Microsoft AppLocker
• Microsoft Defender for Endpoint
• Microsoft Intune
• Microsoft Configuration Manager / SCCM / MECM
• Airlock Digital

Why Join?

This is an excellent opportunity to contribute to a significant enterprise cyber-security initiative and gain exposure to application control, endpoint security, security governance and large-scale technology environments.