Endpoint Security Engineer: WDAC & AppLocker Expert

NTT DATA, Inc.; Sydney; On-site; AUD 120,000 - 170,000; Full time

Job summary

NTT DATA, Inc. in Sydney seeks a Security Engineer to lead enterprise endpoint protection within a high-profile security program. You will specialize in WDAC/ACFB, AppLocker, Intune, and PowerShell to shape application allowlisting and strengthen defenses.

This role focuses on policy design, incident resolution, log analysis, and deployment via Intune, GPO, and MECM/SCCM, with dashboards and security reporting leveraging KQL.

Qualifications

• Hands-on WDAC/ACFB policy design and management.
• Experience with AppLocker and Defender XDR logs.
• Proficient in PowerShell scripting and code signing.
• Knowledge of SIEM/Nicrosoft Sentinel and PKI concepts.

Responsibilities

• Design and manage WDAC/ACFB policies and supplemental policies.
• Investigate and resolve application block events and compatibility issues.
• Create and manage security catalog (.cat) files.
• Monitor and analyse App Control, AppLocker, and Defender XDR logs.
• Deploy policies via Intune, Group Policy, and MECM/SCCM.
• Develop KQL queries, dashboards, and security reporting.

Skills

WDAC/ACFB

AppLocker

PowerShell

Windows Security

SIEM

Code Signing

Job description

NTT DATA, Inc. in Sydney seeks a Security Engineer to lead enterprise endpoint protection within a high-profile security program. You will specialize in WDAC/ACFB, AppLocker, Intune, and PowerShell to shape application allowlisting and strengthen defenses.

This role focuses on policy design, incident resolution, log analysis, and deployment via Intune, GPO, and MECM/SCCM, with dashboards and security reporting leveraging KQL.