Endpoint Security Engineer — 12-Month Hybrid Contract

Rest; Sydney; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

5 Rest Days (wellbeing days)

Parental leave 22 weeks

Learning and development

Income Protection

Leave purchasing option

Recognition awards

Job summary

Rest is seeking an End User Computer Security Engineer for a 12-month fixed-term contract in Sydney, with hybrid working. The role focuses on protecting and enabling the technology used by thousands of Rest employees, delivering secure, reliable experiences.

You will integrate telemetry with SIEM, automate remediation, and collaborate with Endpoint Services and M365 teams. The ideal candidate will bring automation skills and a proven track record balancing security with user experience.

Qualifications

• Demonstrated experience engineering and operating Microsoft Intune, Defender for Endpoint, Entra ID and Conditional Access in a complex enterprise environment.
• Proficiency in PowerShell and Microsoft Graph, with experience automating configuration validation, remediation and evidence collection.
• Practical experience with the Essential Eight, CIS benchmarks, EDR/XDR, BitLocker or FileVault, application control, privileged access and vulnerability management.
• Proven ability to troubleshoot complex endpoint issues and balance security, reliability and user experience.
• Strong documentation, communication and stakeholder-engagement skills, including the ability to develop standards, playbooks, risk exemptions and secure operating guidance.
• Relevant Microsoft endpoint or security certification is desirable.

Responsibilities

• Integrate endpoint telemetry with SIEM and incident response processes, investigate control gaps and incidents, and provide actionable evidence to support response and assurance activities.
• Coordinate and deploy fixes with Endpoint Services and M365 teams, automate configuration validation and remediation, and verify effective closure while maintaining reliable service delivery and user experience.
• Lead end-user compute risk exemption activities by assessing residual risk, documenting business justification and compensating controls, coordinating approvals, and monitoring exemptions through review or expiry.
• Provide security standards, exceptions, playbooks, evidence and secure operating guidance that embed security within endpoint operations and support consistent decision-making.

Skills

Intune

Defender for Endpoint

Entra ID

Conditional Access

PowerShell

Graph API

Automation

Stakeholder comms

Tools

Intune

Defender for Endpoint

Entra ID

Graph API

Job description

Rest is seeking an End User Computer Security Engineer for a 12-month fixed-term contract in Sydney, with hybrid working. The role focuses on protecting and enabling the technology used by thousands of Rest employees, delivering secure, reliable experiences.

You will integrate telemetry with SIEM, automate remediation, and collaborate with Endpoint Services and M365 teams. The ideal candidate will bring automation skills and a proven track record balancing security with user experience.