Enterprise Security Engineer
Sydney
Work withcutting-edgeAI technology that helps make the world a safer and more secure place.
DroneShield (ASX:DRO) develops market-leading counter-drone solutions used by militaryorganisations, government agencies, airports, critical infrastructure operators, and law enforcementoperatingin some of the most challenging and high-stakes environments in the world.
Employees work at the forefront of innovation, solving complex technical problems and delivering mission-critical capabilities where performance, reliability, and speed matter.
As an ASX200-listed company and theworld'sonly publicly listed pure-play counter-drone business, DroneShield is experiencing rapid growth.
Revenue increased from A$57 million in **** to more than A$217 million in ****, supported by record profitability, a global sales pipeline exceeding A$2.5 billion, and annual R&D; investment of over A$50 million.
Since ****, DroneShield has grown from 11 employees to more than 550 globally, with operations across Australia, the United States, Europe, and the Middle East, supporting customers in over 70 countries.
The role is based atDroneShield'sSydney headquarters, which houses corporate, commercial, engineering, and operational teams supporting the company's global growth and customer base.
About the role
DroneShield is seeking an Enterprise Security Engineer to join the Enterprise Security (EntSec) team in Sydney.
This is a mid-level, hands-on engineering role for someone with a few years in IT or security who is ready to take ownership of real systems and grow within the team.
EntSec is a small team inside the wider Security function.
It sits alongside Detection & Response (DnR) and Product Security, and works closely with IT.
EntSec owns the security of DroneShield's corporate environment: identity, endpoints, patching and vulnerability management, remote access, and the technical controls that back our ISO *****, Essential Eight and CMMC obligations.
The team today is the Team Lead, a Junior Enterprise Security Engineer and a DISP / Physical Security Officer.
Our adversaries are sophisticated and well resourced.
To protect DroneShield we focus on the biggest risks, remove whole classes of threat where we can, automate so that a small team can cover a growing company, and continually raise the cost for the attacker.
The partnership model matters here.
IT builds and runs the foundational platforms.




EntSec deploys and enforces security controls on them and makes sure the right telemetry exists.
DnR turns that telemetry into detections and response playbooks.
You will be working across all three every week.
You will inherit real platforms on day one and be expected to run them, not just assist.
In return you get a lot of scope, direct exposure to the Team Lead and CISO, and a explicit path to further career development.
Strong communication skills and being a hands-on engineer are a must.
Responsibilities, Duties and Expectations
Own and improve security controls across the corporate fleet: Windows via Intune, macOS via Jamf, Linux via Landscape
Administer and harden identity: Entra ID, Conditional Access, privileged access, phishing-resistant MFA
Run vulnerability management across the corporate environment: scanning, prioritisation, patch deployment and chasing remediation to closure
Keep up to date with vulnerabilities and CVEs relevant to our stack and drive their mitigation
Operate and tune endpoint protection (Defender for Endpoint, application control) and work with DnR on telemetry and detection coverage
Respond to security incidents involving the corporate environment, and contribute to post-incident fixes
Build and maintain the technical evidence for ISO *****, Essential Eight and CMMC controls that EntSec owns
Review and assess new software, SaaS and third-party integrations before they are approved for use
Automate repeatable work with scripts and platform-native tooling, and document what you build
Collect metrics on control coverage and posture, identify patterns and turn them into actions
Contribute to the Enterprise Security roadmap and take ownership of initiatives within it
Manage concurrent tasks and work with IT, DnR and the wider business to solve problems
Qualifications, Experience and Skills
Bachelor degree in Computer Science, Information Technology or a similar technical field, or equivalent practical experience
3 to 5 years in hands-on IT or security engineering roles.
Backgrounds that fit well include:
Systems or endpoint engineer in a Microsoft 365 / Entra environment
IT engineer or systems administrator with a security focus




Security engineer supporting corporate infrastructure
On-the-tools engineering experience.
This is not a governance-only role
Excellent communication skills, able to explain technical risk to non-technical stakeholders
Strong problem-solving and analytical skills
Essential
Entra ID administration, including Conditional Access and identity governance
Endpoint management with Intune and/or Jamf, including configuration profiles, compliance and app deployment
Endpoint hardening and attack surface reduction (CIS benchmarks, Essential Eight, application control)
Vulnerability management and patch deployment across Windows and macOS
Scripting for automation in PowerShell, Python, Go or bash
Comfortable in a mixed Windows, macOS and Linux environment
Systems thinking: designing fixes that improve the system rather than patching the symptom
Desirable
Microsoft Defender for Endpoint / XDR administration
Linux endpoint management (Canonical Landscape) and secure remote access approaches
Experience gathering or presenting evidence for ISO *****, Essential Eight or CMMC
Third-party or SaaS security assessment experience
Infrastructure as Code and hybrid cloud environments
Experimentation with LLM tooling to automate security operations
An existing AGSVA clearance or the ability to obtain one.
Growth Path
This role is designed for someone who already brings a degree of autonomy and can take real ownership of initiatives.
Working directly with the Enterprise Security Team Lead, the right candidate will take on the corporate security platforms end to end, deepen their technical depth across identity and endpoint security, and broaden their strategic view across the Enterprise Security program.
Progression will be recognised and rewarded as capability and contribution are demonstrated.
Note for recruitment agencies: We do not accept unsolicited candidates from external recruiters unless specifically instructed.
Data Privacy
DroneShield Group Pty Ltd collects and processes personal information for recruitment and hiring purposes.
Where applicable, personal information is processed on the basis of DroneShield's legitimate interests in assessing and selecting candidates for employment.
For further information regarding how we collect, use, disclose, store and retain personal information, including your privacy rights, please refer to our Privacy Policy:
#s-dni #LI-Hybrid
#J-*****-Ljbffr

📌 Enterprise Security Engineer (Sydney)
🏢 Droneshield
📍 Sydney