Job Description
XPT Software Australia Pty Ltd | Contract
n
EndPoint Analyst
n
Sydney, Australia | Posted on 08/04/2025
n
n
XPT SoftwareAustralia PTY Ltd, incorporated in ****, is a Software Services company
n
XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and
Manufacturingdomains.
n
We have 120+technocrats in Australia working at our clientlocations.
n
XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
n
We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
n
n
Job Description
n
Key Responsibilities
n
n
Confirm and identify the use of Internet Explorer 11
n
Document the current state process of PowerShell module logging, script block logging, and transcription events
n
Perform a current state analysis of new controls
n
Ensure command line process creation events are centrally logged
n
Protect event logs from unauthorized modification and deletion
n
Analyze event logs from internet-facing servers in a timely manner to detect cybersecurity events
n
Identify and document all gaps in controls, policies, and configurations
n
Assess potential risks associated with non-compliance and prioritize remediation efforts
n
Review exceptions for use cases where the most restrictive controls are not implemented and validate if compensating controls are adequate
n
Assess and implement MS recommended Blocklist (MRB) across workstations
n




Conduct a Business Impact Assessment on workstations to assess the operational impact of blocking MRB-listed applications
n
Validate the coverage of current 'LOLBAS' blocking against the MRB to ensure that applications already blocked in the environment are aligned with the MRB blocklist
n
Identify and implement compensating controls for applications that cannot be blocked due to operational dependencies, ensuring security is maintained in such cases
n
Ensure changes made to implement MRB are fully documented, and that the implementation aligns with updated Essential Eight ML2 requirements, ready for audit purposes
n
Extract application usage data from Microsoft Defender to determine whether
applications/executables
on the recommended block list
n
Implement continuous monitoring of MRB compliance and update it regularly to address new vulnerabilities, ensuring it remains effective
n
Ensure that MRB blocking rules apply correctly to both privileged and standard user groups, considering role-based access control (RBAC) for different user types and their specific needs
n
n
Required Skills and Experience
n
n
Proven experience in system hardening, security auditing, or compliance
n
Familiarity with ASD Essential Eight and Microsoft security baselines
n
Solid understanding of Windows event logging and PowerShell security features
n
Experience with Intune, Group Policy, or other configuration management tools
n
Excellent documentation and analytical skills
n
Familiarity with ITIL framework and processes, particularly in change and incident management
n
Excellent verbal and written communication skills
n
#J-*****-Ljbffr

📌 Endpoint Analyst (New South Wales)
🏢 Xpt Software Australia
📍 New South Wales