Windows Endpoint Security Engineer: WDAC & App Control

FinXL; North Sydney Council; On-site; AUD 150,000 - 190,000; Full time

Job summary

FinXL by Randstad Digital seeks a Senior Windows Endpoint Security Engineer to join the North Sydney and Work from home team. You will implement and manage Microsoft App Control (WDAC), policy allowlisting, and Intune-based security across endpoints.

The role requires PowerShell scripting, security log analysis with Sentinel and KQL, and Defender XDR experience to support proactive threat detection and response.

Qualifications

• Senior Windows Endpoint Security Engineer with hands-on experience.
• Strong knowledge of Microsoft App Control (WDAC) and allowlisting.
• Experience with policy management and automation using PowerShell.
• Familiarity with Microsoft Defender XDR, Sentinel and KQL.
• Experience troubleshooting blocked applications and code signing processes.

Responsibilities

• Implement and maintain endpoint security controls for enterprise.
• Manage App Control policies and allowlisting across devices.
• Automate security tasks with PowerShell and scripts.
• Analyze security logs using Microsoft Sentinel and KQL.
• Collaborate on Defender XDR integration and incident response.

Skills

Senior Windows Endpoint

App Control (WDAC)

Policy allowlisting

Intune

PowerShell

Security log analysis

Microsoft Sentinel

KQL

Defender XDR

Code Integrity

Tools

WDAC

Intune

Defender XDR

Code Signing

Job description

FinXL by Randstad Digital seeks a Senior Windows Endpoint Security Engineer to join the North Sydney and Work from home team. You will implement and manage Microsoft App Control (WDAC), policy allowlisting, and Intune-based security across endpoints.

The role requires PowerShell scripting, security log analysis with Sentinel and KQL, and Defender XDR experience to support proactive threat detection and response.