Security Engineer

Role Summary

We are looking for a hands-on Security Engineer – Application Control to lead the implementation, administration, and ongoing operation of a strategic Application Control capability across a large enterprise environment.

This role will be the technical SME for Application Control technologies, responsible for delivering and operating application allowlisting solutions across Windows, Windows Server, macOS, and Linux environments. Working across both BAU and project initiatives, you will drive the organisation's transition from audit mode to controlled enforcement while partnering closely with infrastructure, endpoint, server, cloud, and security teams.

Contract Summary

• Employment Type: Permanent or 12-month Contract
• Rate: Based on experience
• Work Model: Hybrid
• Location: Melbourne

Responsibilities

• Lead the implementation and ongoing enhancement of enterprise Application Control solutions.
• Design, build, test, and maintain application control policies across Windows 10/11, Windows Server, macOS, and Linux.
• Support the transition from audit mode through to controlled policy enforcement.
• Act as the technical owner for the Application Control platform, including administration, monitoring, reporting, and optimisation.
• Investigate application execution events, policy exceptions, and endpoint security incidents.
• Develop and maintain application allowlisting, trusted installer, and exception management processes.
• Work closely with infrastructure, endpoint, server, cloud, and application teams to onboard new applications and services.
• Analyse telemetry and audit data to continuously improve policy quality and reduce operational overhead.
• Develop and maintain operational documentation including SOPs, runbooks, technical work instructions, and knowledge base articles.
• Support ITIL-based incident, problem, and change management processes.
• Facilitate technical workshops and provide guidance to business and technology stakeholders.
• Support security audits, compliance activities, and evidence collection.
• Identify opportunities to strengthen endpoint security controls and reduce organisational attack surface.

Skills & Experience

• 5+ years' experience in Cyber Security, Endpoint Security, or Security Engineering.
• Proven hands-on experience implementing and administering enterprise Application Control solutions, including one or more of:
• Linux Application Control
• Airlock Digital
• ThreatLocker
• Carbon Black App Control
• Microsoft WDAC
• Microsoft AppLocker
• Equivalent application allowlisting platforms
• Strong understanding of:
• Application Allowlisting & Application Control
• Endpoint Security
• Operating System Security
• Privileged Access & Privilege Management
• Experience supporting:
• Windows 10/11
• Windows Server
• macOS
• Experience designing, testing, and maintaining application control policies.
• Strong troubleshooting, root cause analysis, and operational support capability.
• Experience working within ITIL-based operational environments.
• Excellent communication and stakeholder engagement skills.

Highly Regarded

• Experience with EDR platforms such as CrowdStrike, Microsoft Defender, or Carbon Black.
• Experience integrating security platforms with ServiceNow, Splunk, SIEM platforms, or automation workflows.
• Scripting experience using PowerShell, Bash, or Python.
• Experience working within large enterprise environments.
• Security certifications such as CISSP, GSEC, GCWN, Microsoft Security certifications, or relevant vendor certifications.