Endpoint Security & Compliance Analyst

XPT Software; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

XPT Software in Australia is seeking cybersecurity professionals to strengthen system hardening, auditing, and compliance. You will work with ASD Essential Eight baselines and Microsoft security controls, focusing on Windows event logging, PowerShell security, and configuration management tools such as Intune and Group Policy.

You will document current controls, identify gaps, assess risks, and validate compensating controls for MRB implementations across workstations.

Qualifications

• Proven experience in system hardening, security auditing, or compliance.
• Familiarity with ASD Essential Eight and Microsoft security baselines.
• Strong understanding of Windows event logging and PowerShell security features.
• Experience with Intune, Group Policy, or other configuration management tools.
• Excellent documentation and analytical skills.
• Familiarity with ITIL framework and processes, particularly change and incident management.
• Excellent verbal and written communication skills.

Responsibilities

• Confirm and identify the use of Internet Explorer 11.
• Document the current state process of PowerShell module logging, script block logging, and transcription events.
• Perform a current state analysis of new controls.
• Ensure command line process creation events are centrally logged.
• Protect event logs from unauthorized modification and deletion.
• Analyze event logs from internet-facing servers to detect cybersecurity events.
• Identify and document all gaps in controls, policies, and configurations.
• Assess risks associated with non-compliance and prioritize remediation.
• Review exceptions for cases where restrictive controls are not implemented and validate compensating controls.
• Assess and implement MRB across workstations.
• Conduct a Business Impact Assessment on workstations for MRB blocking impact.
• Validate MRB coverage against LOLBAS blocking and ensure alignment.
• Identify compensating controls for applications blocked due to operational dependencies.
• Ensure MRB changes are documented and aligned with Essential Eight ML2 for audit readiness.
• Extract application usage data from Defender to verify MRB applicability.
• Implement continuous MRB compliance monitoring and updates.
• Ensure MRB blocking rules cover both privileged and standard users with RBAC considerations.

Skills

System hardening

Security auditing

Compliance

ASD Essential Eight

Microsoft security baselines

Windows event logging

PowerShell security features

Documentation

ITIL processes

Communication

Tools

Intune

Group Policy

Job description

XPT Software in Australia is seeking cybersecurity professionals to strengthen system hardening, auditing, and compliance. You will work with ASD Essential Eight baselines and Microsoft security controls, focusing on Windows event logging, PowerShell security, and configuration management tools such as Intune and Group Policy.

You will document current controls, identify gaps, assess risks, and validate compensating controls for MRB implementations across workstations.