XPT Software Australia Pty Ltd | ContractEndPoint AnalystSydney, Australia | Posted on 08/04/2025XPT SoftwareAustralia PTY Ltd, incorporated in ****, is a Software Services companyXPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.We have 120+technocrats in Australia working at our clientlocations.XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.We have served100+ clients globally, fulfilling their onsite-offshoreneeds.Job DescriptionKey ResponsibilitiesConfirm and identify the use of Internet Explorer 11Document the current state process of PowerShell module logging, script block logging, and transcription eventsPerform a current state analysis of current controlsEnsure command line process creation events are centrally loggedProtect event logs from unauthorized modification and deletionAnalyze event logs from internet-facing servers in a timely manner to detect cybersecurity eventsIdentify and document all gaps in controls, policies, and configurationsAssess potential risks associated with non-compliance and prioritize remediation effortsReview exceptions for use cases where the most restrictive controls are not implemented and validate if compensating controls are adequateAssess and implement MS recommended Blocklist (MRB)



across workstationsConduct a Business Impact Assessment on workstations to assess the operational impact of blocking MRB-listed applicationsValidate the coverage of current 'LOLBAS' blocking against the MRB to ensure that applications already blocked in the environment are aligned with the MRB blocklistIdentify and implement compensating controls for applications that cannot be blocked due to operational dependencies, ensuring security is maintained in such casesEnsure changes made to implement MRB are fully documented, and that the implementation aligns with updated Essential Eight ML2 requirements, ready for audit purposesExtract application usage data from Microsoft Defender to determine whether applications/executables on the recommended block listImplement continuous monitoring of MRB compliance and update it regularly to address new vulnerabilities, ensuring it remains effectiveEnsure that MRB blocking rules apply correctly to both privileged and standard user groups, considering role-based access control (RBAC) for different user types and their specific needsRequired Skills and ExperienceProven experience in system hardening, security auditing, or complianceFamiliarity with ASD Essential Eight and Microsoft security baselinesStrong understanding of Windows event logging and PowerShell security featuresExperience with Intune, Group Policy, or other configuration management toolsExcellent documentation and analytical skillsFamiliarity with ITIL framework and processes, particularly in change and incident managementExcellent verbal and written communication skills
#J-*****-Ljbffr

📌 Endpoint Analyst (New South Wales)
🏢 Xpt Software Australia
📍 New South Wales