Job Description

- Join Rest, a purpose-driven organisation helping more than 2 million Australians achieve a better retirement

- Protect and enhance the security of the technology thousands of Rest employees rely on every day.

- 12 Month Fixed Term Contract - Sydney Located - Hybrid Working

At Rest, we help more than 2 million Australians to build a better financial future. With around $112 billion in funds under management, we focus on delivering strong long-term outcomes for our members — from their first job through to retirement*. Your best at Rest means focusing on what matters, being trusted to get on with it, and knowing your work genuinely makes a difference. That’s how we operate every day, guided by our values: Be Daring, Keep It Straightforward, Take Action and Have Grit.

Join us as a End User Computer Security Engineer on a 12 Month Fixed Term Contract where you’ll Engineer and sustain security controls across Rest’s end-user computing estate, including Windows, macOS, mobile devices, browsers and productivity services. Embed security into endpoint standards and operational processes while preserving usability and reliable service delivery.

Accountabilities/Responsibilities

- Define, implement and sustain hardened security baselines across Windows, macOS, mobile devices, browsers and productivity platforms,



aligned to the Essential Eight, CIS benchmarks and Rest standards.
- Engineer and optimise endpoint detection and response, device compliance, application control, encryption, local privilege, privileged access and browser security controls.
- Integrate endpoint telemetry with SIEM and incident response processes, investigate control gaps and incidents, and provide actionable evidence to support response and assurance activities.
- Own the remediation of prioritised endpoint, operating system, browser, productivity-platform and device-control findings identified through security tooling and the vulnerability management process.
- Coordinate and deploy fixes with Endpoint Services and M365 teams, automate configuration validation and remediation, and verify effective closure while maintaining reliable service delivery and user experience.
- Lead end-user compute risk exemption activities by assessing residual risk, documenting business justification and compensating controls, coordinating approvals, and monitoring exemptions through review or expiry.
- Provide security standards, exceptions, playbooks, evidence and secure operating guidance that embed security within endpoint operations and support consistent decision-making.

📌 End User Computer Security Engineer - 12 Month Fixed Term Contract (Sydney)
🏢 Rest
📍 Sydney