Security Engineer

NTT DATA, Inc.; Sydney; On-site; AUD 120,000 - 170,000; Full time

Job summary

NTT DATA, Inc. in Sydney seeks a Security Engineer to lead enterprise endpoint protection within a high-profile security program. You will specialize in WDAC/ACFB, AppLocker, Intune, and PowerShell to shape application allowlisting and strengthen defenses.

This role focuses on policy design, incident resolution, log analysis, and deployment via Intune, GPO, and MECM/SCCM, with dashboards and security reporting leveraging KQL.

Qualifications

• Hands-on WDAC/ACFB policy design and management.
• Experience with AppLocker and Defender XDR logs.
• Proficient in PowerShell scripting and code signing.
• Knowledge of SIEM/Nicrosoft Sentinel and PKI concepts.

Responsibilities

• Design and manage WDAC/ACFB policies and supplemental policies.
• Investigate and resolve application block events and compatibility issues.
• Create and manage security catalog (.cat) files.
• Monitor and analyse App Control, AppLocker, and Defender XDR logs.
• Deploy policies via Intune, Group Policy, and MECM/SCCM.
• Develop KQL queries, dashboards, and security reporting.

Skills

WDAC/ACFB

AppLocker

PowerShell

Windows Security

SIEM

Code Signing

Job description

Join a high-profile enterprise security program and help shape the future of endpoint security.

We're seeking a Security Engineer with hands-on experience in Microsoft App Control for Business (WDAC/ACFB), AppLocker, Intune, and PowerShell to lead application allowlisting and endpoint protection initiatives.

Key Responsibilities

• Design and manage WDAC/ACFB policies and supplemental policies
• Investigate and resolve application block events and compatibility issues
• Create and manage security catalog (.cat) files
• Monitor and analyse App Control, AppLocker, and Defender XDR logs
• Deploy policies via Intune, Group Policy, and MECM/SCCM
• Develop KQL queries, dashboards, and security reporting

Required Skills

• Microsoft App Control for Business (WDAC/ACFB)
• AppLocker
• PowerShell Scripting
• Windows Security & Code Integrity
• SIEM / Microsoft Sentinel
• PKI & Code Signing

Nice to Have

• Security Catalog (.cat) management
• SC-200, AZ-500, SC-300, or Security+
• Experience with Secure Boot, TPM, VBS, and HVCI
• If you're passionate about endpoint security and want to work on a large-scale Microsoft security environment, we'd love to hear from you.