End User Computer Security Engineer - 12 Month Fixed Term Contract

Rest; Sydney; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

5 Rest Days (wellbeing days)

Parental leave 22 weeks

Learning and development

Income Protection

Leave purchasing option

Recognition awards

Job summary

Rest is seeking an End User Computer Security Engineer for a 12-month fixed-term contract in Sydney, with hybrid working. The role focuses on protecting and enabling the technology used by thousands of Rest employees, delivering secure, reliable experiences.

You will integrate telemetry with SIEM, automate remediation, and collaborate with Endpoint Services and M365 teams. The ideal candidate will bring automation skills and a proven track record balancing security with user experience.

Qualifications

• Demonstrated experience engineering and operating Microsoft Intune, Defender for Endpoint, Entra ID and Conditional Access in a complex enterprise environment.
• Proficiency in PowerShell and Microsoft Graph, with experience automating configuration validation, remediation and evidence collection.
• Practical experience with the Essential Eight, CIS benchmarks, EDR/XDR, BitLocker or FileVault, application control, privileged access and vulnerability management.
• Proven ability to troubleshoot complex endpoint issues and balance security, reliability and user experience.
• Strong documentation, communication and stakeholder-engagement skills, including the ability to develop standards, playbooks, risk exemptions and secure operating guidance.
• Relevant Microsoft endpoint or security certification is desirable.

Responsibilities

• Integrate endpoint telemetry with SIEM and incident response processes, investigate control gaps and incidents, and provide actionable evidence to support response and assurance activities.
• Coordinate and deploy fixes with Endpoint Services and M365 teams, automate configuration validation and remediation, and verify effective closure while maintaining reliable service delivery and user experience.
• Lead end-user compute risk exemption activities by assessing residual risk, documenting business justification and compensating controls, coordinating approvals, and monitoring exemptions through review or expiry.
• Provide security standards, exceptions, playbooks, evidence and secure operating guidance that embed security within endpoint operations and support consistent decision-making.

Skills

Intune

Defender for Endpoint

Entra ID

Conditional Access

PowerShell

Graph API

Automation

Stakeholder comms

Tools

Intune

Defender for Endpoint

Entra ID

Graph API

Job description

End User Computer Security Engineer - 12 Month Fixed Term Contract

Full-time

We’ve been around since 1988, and today we’re one of Australia’s largest profit‑to‑member super funds.

That means everything we do is focused on delivering better outcomes for our members – not shareholders.

Please note Rest does not accept speculative resumes from recruitment agencies

Rest will review applications prior to the closing date and may close the role earlier

JoinRest, a purpose-driven organisation helping more than 2 million Australians achieve a better retirement

Protect and enhance the security of the technology thousands of Rest employees rely on every day.

12 Month Fixed Term Contract - Sydney Located - Hybrid Working

At Rest, we help more than 2 million Australians to build a better financial future. With around $112 billion in funds under management, we focus on delivering strong long‑term outcomes for our members — from their first job through to retirement*. Your best at Rest means focusing on what matters, being trusted to get on with it, and knowing your work genuinely makes a difference. That’s how we operate every day, guided by our values: Be Daring, Keep It Simple, Take Action and Have Grit.

Accountabilities/Responsibilities

• Integrate endpoint telemetry with SIEM and incident response processes, investigate control gaps and incidents, and provide actionable evidence to support response and assurance activities.
• Coordinate and deploy fixes with Endpoint Services and M365 teams, automate configuration validation and remediation, and verify effective closure while maintaining reliable service delivery and user experience.
• Lead end-user compute risk exemption activities by assessing residual risk, documenting business justification and compensating controls, coordinating approvals, and monitoring exemptions through review or expiry.
• Provide security standards, exceptions, playbooks, evidence and secure operating guidance that embed security within endpoint operations and support consistent decision-making.

What we are looking for;

The successful candidate will bring strong endpoint-security engineering capability, practical automation experience and a proven ability to balance security risk with reliable service delivery and user experience

Experience, skills and qualifications

• Demonstrated experience engineering and operating Microsoft Intune, Defender for Endpoint, Entra ID and Conditional Access in a complex enterprise environment.
• Proficiency in PowerShell and Microsoft Graph, with experience automating configuration validation, remediation and evidence collection.
• Practical experience with the Essential Eight, CIS benchmarks, EDR/XDR, BitLocker or FileVault, application control, privileged access and vulnerability management.
• Proven ability to troubleshoot complex endpoint issues and balance security, reliability and user experience.
• Strong documentation, communication and stakeholder‑engagement skills, including the ability to develop standards, playbooks, risk exemptions and secure operating guidance.
• Relevant Microsoft endpoint or security certification is desirable.

What you'll find at Rest

• 5 Rest Days (wellbeing days) each year in addition to annual leave
• Eligible employees are entitled to22 weeks paid parental leave (gender neutral)
• Learning and development opportunities, including AI & Data Academy, leadership programs, LinkedIn Learning, study assistance and professional memberships
• Income Protection Insurance
• Option to purchase additional leave
• Recognition through our Rest Excellence Awards

If you share our values and this sounds like the kind of place you’d do your best work, we’d like to hear from you.

Rest is committed to creating a flexible work environment and culture that embraces diversity, equity, and inclusion - where people feel welcome, safe to be themselves and inspired to do their best.

We value the different backgrounds, lived experiences and abilities our diverse team brings. We welcome and encourage applications from candidates of all ages, cultural backgrounds, faiths, gender identities, sexual orientations and thinking styles. This includes people with disability, neurodiverse individuals, Aboriginal & Torres Strait Islander peoples and those with disrupted work history due to career or other breaks.

We welcome applications from all candidates. To be considered, you will need the right to work in Australia.

*Funds under management as at 30 June 2026. Rest is recognised as a superannuation leader across a range of areas including performance, responsible investment and member value. Find out more at https://rest.com.au/why-rest/awards .