Endpoint Security Engineer: Intune, Defender & EDR Expert

Talenza; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

Talenza is seeking a hands-on Endpoint Security Engineer to secure and optimize enterprise endpoints across Windows, macOS, mobile and Microsoft 365 environments. You will design baselines, manage Intune, Defender for Endpoint, Entra ID and Conditional Access, automate controls with PowerShell and Graph, and collaborate with infrastructure, platform and security teams.

The role emphasizes balancing security with usability and requires clear communication with both technical and non-technical

Qualifications

• Strong experience with Intune, Defender for Endpoint, Entra ID and Conditional Access.
• Solid understanding of Windows, macOS, and mobile device management.
• Experience with PowerShell automation and Microsoft Graph.
• Knowledge of Essential Eight, CIS benchmarks, EDR/XDR, BitLocker/FileVault and vulnerability management.
• Ability to balance security requirements with user experience.
• Strong communicator capable of engaging technical and non-technical stakeholders.

Responsibilities

• Design and maintain endpoint security baselines across Windows, macOS and mobile devices.
• Manage and optimise Microsoft Intune, Defender for Endpoint, Entra ID and Conditional Access.
• Drive remediation of endpoint vulnerabilities and security findings.
• Automate security controls, compliance validation and reporting using PowerShell and Microsoft Graph.
• Enhance EDR/XDR, application control, encryption and privileged access capabilities.
• Partner with technology teams to implement security improvements and reduce risk.
• Develop security standards, playbooks, exceptions and operational guidance.

Skills

Intune

Defender for Endpoint

Entra ID

Conditional Access

PowerShell

Microsoft Graph

Security automation

EDR/XDR

BitLocker

FileVault

Vulnerability management

Communication

Job description

Talenza is seeking a hands-on Endpoint Security Engineer to secure and optimize enterprise endpoints across Windows, macOS, mobile and Microsoft 365 environments. You will design baselines, manage Intune, Defender for Endpoint, Entra ID and Conditional Access, automate controls with PowerShell and Graph, and collaborate with infrastructure, platform and security teams.

The role emphasizes balancing security with usability and requires clear communication with both technical and non-technical