Enterprise Security EngineerNew

Droneshield; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

DroneShield is seeking an Enterprise Security Engineer to join the Enterprise Security (EntSec) team in Sydney. This mid-level, hands-on engineering role will own security controls across the corporate fleet and work across IT, DnR, and Product Security to protect the organization's systems.

You will manage identity, endpoints, patching, vulnerability management, and incident response, with exposure to ISO 27001, Essential Eight and CMMC controls, plus a clear growth path within a fast-growing

Qualifications

• Bachelor degree in Computer Science or equivalent practical experience.
• 3–5 years in hands-on IT or security engineering roles.
• On-the-tools engineering experience; not governance-only.
• Excellent communication skills to explain risk to non-technical stakeholders.
• Experience with Entra ID, Conditional Access, and identity governance.
• Endpoint management with Intune and Jamf, including config profiles.
• Endpoint hardening to CIS benchmarks and Essential Eight.
• Vulnerability management and patch deployment across Windows/macOS.
• Scripting for automation (PowerShell, Python, Go or Bash).
• Experience in mixed Windows/macOS/Linux environments.
• ISO 27001 and CMMC evidence gathering experience.
• Infrastructure as Code and hybrid cloud environments.

Responsibilities

• Own and improve security controls across the corporate fleet: Windows via Intune, macOS via Jamf, Linux via Landscape
• Administer and harden identity: Entra ID, Conditional Access, privileged access, phishing-resistant MFA
• Run vulnerability management across the corporate environment: scanning, prioritisation, patch deployment and chasing remediation to closure
• Keep up to date with vulnerabilities and CVEs relevant to our stack and drive their mitigation
• Operate and tune endpoint protection (Defender for Endpoint, application control) and work with DnR on telemetry and detection coverage
• Respond to security incidents involving the corporate environment, and contribute to post-incident fixes
• Build and maintain the technical evidence for ISO 27001, Essential Eight and CMMC controls that EntSec owns
• Review and assess new software, SaaS and third-party integrations before they are approved for use
• Automate repeatable work with scripts and platform-native tooling, and document what you build
• Collect metrics on control coverage and posture, identify patterns and turn them into actions
• Contribute to the Enterprise Security roadmap and take ownership of initiatives within it
• Manage concurrent tasks and work with IT, DnR and the wider business to solve problems

Skills

Entra ID admin

Intune management

Jamf management

Vulnerability management

PowerShell scripting

Python scripting

Endpoint security

Communication skills

Problem solving

Systems thinking

Cross-platform

Education

CS/IT degree

Tools

Entra ID

Intune

Jamf

Landscape

Defender for Endpoint

Job description

Work withcutting-edgeAI technology that helps make the world a safer and more secure place. DroneShield (ASX:DRO) develops market-leading counter-drone solutions used by militaryorganisations, government agencies, airports, critical infrastructure operators, and law enforcementoperatingin some of the most challenging and high-stakes environments in the world. Employees work at the forefront of innovation, solving complex technical problems and delivering mission-critical capabilities where performance, reliability, and speed matter.

As an ASX200-listed company and theworld'sonly publicly listed pure-play counter-drone business, DroneShield is experiencing rapid growth. Revenue increased from A$57 million in 2024 to more than A$217 million in 2025, supported by record profitability, a global sales pipeline exceeding A$2.5 billion, and annual R&D investment of over A$50 million.

Since 2017, DroneShield has grown from 11 employees to more than 550 globally, with operations across Australia, the United States, Europe, and the Middle East, supporting customers in over 70 countries.

The role is based atDroneShield'sSydney headquarters, which houses corporate, commercial, engineering, and operational teams supporting the company's global growth and customer base.

About the role

DroneShield is seeking an Enterprise Security Engineer to join the Enterprise Security (EntSec) team in Sydney. This is a mid-level, hands-on engineering role for someone with a few years in IT or security who is ready to take ownership of real systems and grow within the team.

EntSec is a small team inside the wider Security function. It sits alongside Detection & Response (DnR) and Product Security, and works closely with IT. EntSec owns the security of DroneShield's corporate environment: identity, endpoints, patching and vulnerability management, remote access, and the technical controls that back our ISO 27001, Essential Eight and CMMC obligations. The team today is the Team Lead, a Junior Enterprise Security Engineer and a DISP / Physical Security Officer.

Our adversaries are sophisticated and well resourced. To protect DroneShield we focus on the biggest risks, remove whole classes of threat where we can, automate so that a small team can cover a growing company, and continually raise the cost for the attacker.

The partnership model matters here. IT builds and runs the foundational platforms. EntSec deploys and enforces security controls on them and makes sure the right telemetry exists. DnR turns that telemetry into detections and response playbooks. You will be working across all three every week.

You will inherit real platforms on day one and be expected to run them, not just assist. In return you get a lot of scope, direct exposure to the Team Lead and CISO, and a clear path to further career development.

Strong communication skills and being a hands-on engineer are a must.

Responsibilities, Duties and Expectations

• Own and improve security controls across the corporate fleet: Windows via Intune, macOS via Jamf, Linux via Landscape
• Administer and harden identity: Entra ID, Conditional Access, privileged access, phishing-resistant MFA
• Run vulnerability management across the corporate environment: scanning, prioritisation, patch deployment and chasing remediation to closure
• Keep up to date with vulnerabilities and CVEs relevant to our stack and drive their mitigation
• Operate and tune endpoint protection (Defender for Endpoint, application control) and work with DnR on telemetry and detection coverage
• Respond to security incidents involving the corporate environment, and contribute to post-incident fixes
• Build and maintain the technical evidence for ISO 27001, Essential Eight and CMMC controls that EntSec owns
• Review and assess new software, SaaS and third-party integrations before they are approved for use
• Automate repeatable work with scripts and platform-native tooling, and document what you build
• Collect metrics on control coverage and posture, identify patterns and turn them into actions
• Contribute to the Enterprise Security roadmap and take ownership of initiatives within it
• Manage concurrent tasks and work with IT, DnR and the wider business to solve problems

Qualifications, Experience and Skills

• Bachelor degree in Computer Science, Information Technology or a similar technical field, or equivalent practical experience
• 3 to 5 years in hands-on IT or security engineering roles. Backgrounds that fit well include:
  • Systems or endpoint engineer in a Microsoft 365 / Entra environment
  • IT engineer or systems administrator with a security focus
  • Security engineer supporting corporate infrastructure
• On-the-tools engineering experience. This is not a governance-only role
• Excellent communication skills, able to explain technical risk to non-technical stakeholders
• Strong problem-solving and analytical skills
• Entra ID administration, including Conditional Access and identity governance
• Endpoint management with Intune and/or Jamf, including configuration profiles, compliance and app deployment
• Endpoint hardening and attack surface reduction (CIS benchmarks, Essential Eight, application control)
• Vulnerability management and patch deployment across Windows and macOS
• Scripting for automation in PowerShell, Python, Go or bash
• Comfortable in a mixed Windows, macOS and Linux environment
• Systems thinking: designing fixes that improve the system rather than patching the symptom
• Linux endpoint management (Canonical Landscape) and secure remote access approaches
• Experience gathering or presenting evidence for ISO 27001, Essential Eight or CMMC
• Third-party or SaaS security assessment experience
• Infrastructure as Code and hybrid cloud environments
• Experimentation with LLM tooling to automate security operations
• An existing AGSVA clearance or the ability to obtain one.

Growth Path

This role is designed for someone who already brings a degree of autonomy and can take real ownership of initiatives. Working directly with the Enterprise Security Team Lead, the right candidate will take on the corporate security platforms end to end, deepen their technical depth across identity and endpoint security, and broaden their strategic view across the Enterprise Security program. Progression will be recognised and rewarded as capability and contribution are demonstrated.

Note for recruitment agencies: We do not accept unsolicited candidates from external recruiters unless specifically instructed.

Data Privacy

DroneShield Group Pty Ltd collects and processes personal information for recruitment and hiring purposes. Where applicable, personal information is processed on the basis of DroneShield's legitimate interests in assessing and selecting candidates for employment. For further information regarding how we collect, use, disclose, store and retain personal information, including your privacy rights, please refer to our Privacy Policy:https://www.droneshield.com/privacy-policy

Be careful - Don`t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .