Security Engineer - Microsoft App Control

FinXL; North Sydney Council; Hybrid; AUD 150,000 - 190,000; Full time

Job summary

FinXL by Randstad Digital seeks a Senior Windows Endpoint Security Engineer to join the North Sydney and Work from home team. You will implement and manage Microsoft App Control (WDAC), policy allowlisting, and Intune-based security across endpoints.

The role requires PowerShell scripting, security log analysis with Sentinel and KQL, and Defender XDR experience to support proactive threat detection and response.

Qualifications

• Senior Windows Endpoint Security Engineer with hands-on experience.
• Strong knowledge of Microsoft App Control (WDAC) and allowlisting.
• Experience with policy management and automation using PowerShell.
• Familiarity with Microsoft Defender XDR, Sentinel and KQL.
• Experience troubleshooting blocked applications and code signing processes.

Responsibilities

• Implement and maintain endpoint security controls for enterprise.
• Manage App Control policies and allowlisting across devices.
• Automate security tasks with PowerShell and scripts.
• Analyze security logs using Microsoft Sentinel and KQL.
• Collaborate on Defender XDR integration and incident response.

Skills

Senior Windows Endpoint

App Control (WDAC)

Policy allowlisting

Intune

PowerShell

Security log analysis

Microsoft Sentinel

KQL

Defender XDR

Code Integrity

Tools

WDAC

Intune

Defender XDR

Code Signing

Job description

FinXL by Randstad Digital focuses on developing client's Database, Digital and AI projects by providing specialised skills, managed programs, and strategic consulting across various industries.

We solve complex technological and business challenges with highly talented people.

We are seeking a Security Engineer with Microsoft App Control to join the end point security project team - North Sydney & Work from home

Skills and Experience

• Experience as a Senior Windows Endpoint Security Engineer
• Experience in Microsoft App Control for Business - formerly WDAC
• Experience in application allowlisting and policy management
• Experience in Microsoft Intune and endpoint security
• Experience in PowerShell scripting and automation
• Experience in Security log analysis, Microsoft Sentinel and KQL
• Experience in Microsoft Defender XDR
• Experience across Windows Code Integrity, troubleshooting blocked applications, security catalogues-code signing and ideally Defender XDR or Sentinel with KQL.

S12