Microsoft Endpoint Security Engineer

Talenza; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

Talenza is seeking a hands-on Endpoint Security Engineer to secure and optimize enterprise endpoints across Windows, macOS, mobile and Microsoft 365 environments. You will design baselines, manage Intune, Defender for Endpoint, Entra ID and Conditional Access, automate controls with PowerShell and Graph, and collaborate with infrastructure, platform and security teams.

The role emphasizes balancing security with usability and requires clear communication with both technical and non-technical

Qualifications

• Strong experience with Intune, Defender for Endpoint, Entra ID and Conditional Access.
• Solid understanding of Windows, macOS, and mobile device management.
• Experience with PowerShell automation and Microsoft Graph.
• Knowledge of Essential Eight, CIS benchmarks, EDR/XDR, BitLocker/FileVault and vulnerability management.
• Ability to balance security requirements with user experience.
• Strong communicator capable of engaging technical and non-technical stakeholders.

Responsibilities

• Design and maintain endpoint security baselines across Windows, macOS and mobile devices.
• Manage and optimise Microsoft Intune, Defender for Endpoint, Entra ID and Conditional Access.
• Drive remediation of endpoint vulnerabilities and security findings.
• Automate security controls, compliance validation and reporting using PowerShell and Microsoft Graph.
• Enhance EDR/XDR, application control, encryption and privileged access capabilities.
• Partner with technology teams to implement security improvements and reduce risk.
• Develop security standards, playbooks, exceptions and operational guidance.

Skills

Intune

Defender for Endpoint

Entra ID

Conditional Access

PowerShell

Microsoft Graph

Security automation

EDR/XDR

BitLocker

FileVault

Vulnerability management

Communication

Job description

Looking for a hands-on Endpoint Security Engineer who enjoys solving complex security challenges while improving the end-user experience. This role sits within a high-performing security team and focuses on securing and optimising enterprise endpoints across Windows, macOS, mobile and Microsoft 365 environments.

You'll be responsible for engineering, implementing and continuously improving endpoint security controls across a large enterprise environment. Working closely with infrastructure, M365, platform and security teams, you'll help drive security outcomes while ensuring reliability and usability remain front of mind.

• Design and maintain endpoint security baselines across Windows, macOS and mobile devices.
• Manage and optimise Microsoft Intune, Defender for Endpoint, Entra ID and Conditional Access.
• Drive remediation of endpoint vulnerabilities and security findings.
• Automate security controls, compliance validation and reporting using PowerShell and Microsoft Graph.
• Enhance EDR/XDR, application control, encryption and privileged access capabilities.
• Partner with technology teams to implement security improvements and reduce risk.
• Develop security standards, playbooks, exceptions and operational guidance.

• Strong experience with Intune, Defender for Endpoint, Entra ID and Conditional Access.
• Solid understanding of Windows, macOS, mobile device management and endpoint security.
• Experience with PowerShell automation and Microsoft Graph.
• Knowledge of Essential Eight, CIS benchmarks, EDR/XDR, BitLocker/FileVault and vulnerability management.
• Able to balance security requirements with operational realities and user experience.
• Strong communicator who can engage technical and non-technical stakeholders alike.