Security Engineer - End User Compute

Novon On Demand; Sydney; On-site; AUD 140,000 - 200,000; Full time

Job summary

Novon On Demand in Sydney is seeking an experienced EUC Security Engineer to strengthen the end-user computing security posture across Windows, macOS and mobile devices. You will implement hardened baselines, automate remediation and integrate telemetry with SIEM while partnering with multiple engineering teams.

You will bring hands-on experience with Intune, Defender for Endpoint and Entra ID, plus PowerShell and Microsoft Graph automation.

Qualifications

• Hands-on experience with Microsoft Intune, Defender for Endpoint and Entra ID in a large enterprise.
• Deep knowledge of Windows/macOS security, MDM, browser security and endpoint controls.
• Automation and scripting using PowerShell and Microsoft Graph for configuration and remediation.
• Experience implementing Essential Eight, CIS benchmarks, EDR/XDR and encryption controls.
• Strong problem solving and collaboration with stakeholders.

Responsibilities

• Design, implement and maintain hardened endpoint security baselines aligned with Essential Eight.
• Engineer and optimise endpoint protection, device compliance and application control.
• Manage security capabilities across Intune, Defender, Entra ID and CA.
• Identify and remediate endpoint vulnerabilities and misconfigurations.
• Integrate telemetry with SIEM and incident response for threat handling.
• Develop automation for configuration validation, remediation and evidence collection.
• Document risk exemptions with justifications and compensating controls.
• Develop and maintain security standards, guidance and playbooks.

Skills

Microsoft security

Endpoint security

Automation scripting

Security standards

Troubleshooting

Stakeholder collaboration

Continuous improvement

Certifications

Tools

PowerShell

Microsoft Graph

Intune

Defender for Endpoint

Entra ID

Conditional Access

Job description

Our client is seeking an experienced EUC Security Engineer to join its Information Security team in Sydney. This is an excellent opportunity for a hands-on security professional to play a key role in strengthening the organisation’s end-user computing security posture, protecting devices, users and platforms across a complex enterprise environment.

Key Responsibilities

• Design, implement and maintain hardened endpoint security baselines aligned with the Essential Eight and internal security standards.
• Manage and enhance security capabilities across Microsoft Intune, Defender for Endpoint, Entra ID and Conditional Access.
• Identify, investigate and remediate endpoint vulnerabilities, configuration weaknesses and security control gaps.
• Integrate endpoint security telemetry with SIEM and incident response processes to support effective threat investigation and response.
• Develop automation to streamline security configuration validation, remediation and evidence collection.
• Assess and manage endpoint security risk exemptions, documenting business justifications, residual risks and compensating controls.
• Develop and maintain security standards, technical guidance and operational playbooks to promote consistent security practices.

Our client is seeking an experienced EUC Security Engineer to join its Information Security team in Sydney. This is an excellent opportunity for a hands-on security professional to play a key role in strengthening the organisation’s end-user computing security posture, protecting devices, users and platforms across a complex enterprise environment.

The Opportunity

As part of the Information Security – Offensive team, you will be responsible for engineering, implementing and maintaining security controls across the end-user computing environment, including Windows, macOS, mobile devices, browsers and Microsoft services.
You will act as a technical subject matter expert, partnering closely with Information Security, Endpoint Services, Microsoft 365 and other engineering teams to strengthen security standards, address vulnerabilities, automate remediation and continuously improve security controls without compromising the end-user experience.

Key Responsibilities

• Design, implement and maintain hardened endpoint security baselines aligned with the Essential Eight and internal security standards.
• Engineer and optimise endpoint protection, device compliance, application control, encryption, privileged access and browser security controls.
• Manage and enhance security capabilities across Microsoft Intune, Defender for Endpoint, Entra ID and Conditional Access.
• Identify, investigate and remediate endpoint vulnerabilities, configuration weaknesses and security control gaps.
• Integrate endpoint security telemetry with SIEM and incident response processes to support effective threat investigation and response.
• Develop automation to streamline security configuration validation, remediation and evidence collection.
• Assess and manage endpoint security risk exemptions, documenting business justifications, residual risks and compensating controls.
• Develop and maintain security standards, technical guidance and operational playbooks to promote consistent security practices.

To be successful in this role, you will bring strong hands-on endpoint security engineering experience, a practical approach to automation and the ability to balance security requirements with business and operational needs.

Skills and experience required

• Microsoft security expertise: Strong experience engineering and managing Microsoft Intune, Defender for Endpoint and Entra ID within a complex enterprise environment.
• Endpoint security: In-depth knowledge of Windows and macOS security, mobile device management (MDM), browser security and endpoint platform controls.
• Automation and scripting: Practical experience with PowerShell and Microsoft Graph to automate security configuration, validation and remediation.
• Security frameworks and controls: Experience implementing the Essential Eight and CIS benchmarks, alongside EDR/XDR, BitLocker or File Vault, application control, privileged access and vulnerability management.
• Troubleshooting: Strong analytical and problem-solving skills, with the ability to investigate and resolve complex endpoint security issues.
• Stakeholder engagement: Excellent communication skills and the ability to collaborate effectively with technical teams and business stakeholders.
• Continuous improvement: A proactive, self-motivated approach to improving security controls, processes and operational outcomes.
• Certifications: Relevant Microsoft security certifications will be highly regarded.