Hands-On Enterprise Security Engineer - Grow & Impact

DroneShield; Sydney; On-site; AUD 110,000 - 160,000; Full time

Job summary

DroneShield is seeking an Enterprise Security Engineer to join the EntSec team in Sydney. This mid-level, hands-on role will own security controls across the corporate fleet and collaborate with IT, DnR and Product Security to secure our ISO 27001, Essential Eight and CMMC obligations.

You will manage identity, endpoints, patching, vulnerability management and secure remote access, while building scalable security tooling and automation to support rapid global growth.

Qualifications

• Bachelor degree in Computer Science, Information Technology or similar field, or equivalent experience.
• 3–5 years in hands-on IT/security engineering roles.
• On-the-tools engineering experience required.
• Excellent communication skills for explaining risk to non-technical stakeholders.
• Experience with Entra ID administration, Conditional Access and identity governance.
• Endpoint management with Intune and Jamf; configuration profiles and app deployment.
• Endpoint hardening to reduce attack surface (CIS, Essential Eight, app control).
• Vulnerability management and patch deployment across Windows/macOS.
• Scripting for automation (PowerShell, Python, Go, Bash).
• Experience in mixed Windows/macOS/Linux environments.
• Knowledge of ISO 27001, Essential Eight, or CMMC evidence collection.

Responsibilities

• Own and improve security controls across the corporate fleet: Windows via Intune, macOS via Jamf, Linux via Landscape.
• Administer and harden identity: Entra ID, Conditional Access, privileged access, phishing-resistant MFA.
• Run vulnerability management across the corporate environment: scanning, prioritisation, patching and remediation.
• Keep up to date with vulnerabilities and CVEs relevant to our stack and drive mitigation.
• Operate and tune endpoint protection and work with DnR on telemetry and detections.
• Respond to security incidents and contribute to post-incident fixes.
• Build and maintain evidence for ISO 27001, Essential Eight and CMMC controls.
• Review and assess new software, SaaS and third-party integrations before approval.
• Automate repeatable work with scripts and platform tooling; document what you build.
• Collect metrics on control coverage and posture; translate patterns into actions.
• Contribute to Enterprise Security roadmap and own initiatives within it.
• Manage concurrent tasks with IT, DnR and wider business to solve problems.

Skills

Entra ID

Intune

Jamf

Vulnerability mgmt

Scripting

Windows admin

macOS admin

Linux admin

ISO 27001

CMMC

Education

Bachelor degree

Tools

Landscape

Job description

DroneShield is seeking an Enterprise Security Engineer to join the EntSec team in Sydney. This mid-level, hands-on role will own security controls across the corporate fleet and collaborate with IT, DnR and Product Security to secure our ISO 27001, Essential Eight and CMMC obligations.

You will manage identity, endpoints, patching, vulnerability management and secure remote access, while building scalable security tooling and automation to support rapid global growth.