Job Description

XPT Software Australia Pty Ltd | Contract

EndPoint Analyst n

Sydney, Australia | Posted on 08/04/2025

n

n
- XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company

n
- XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.

n
- We have 120+technocrats in Australia working at our clientlocations.

n
- XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.

n
- We have served100+ clients globally, fulfilling their onsite-offshoreneeds.

n

Job Description n

Key Responsibilities:

n

· Confirm and identify the use of Internet Explorer 11.

n

· Document the current state process of PowerShell module logging, script block logging, and transcription events.

n

· Perform a current state analysis of new controls.

n

· Ensure command line process creation events are centrally logged.

n

· Protect event logs from unauthorized modification and deletion.

n

· Analyze event logs from internet-facing servers in a timely manner to detect cybersecurity events.

n

· Identify and document all gaps in controls, policies, and configurations.

n

· Assess potential risks associated with non-compliance and prioritize remediation efforts

n

· Review exceptions for use cases where the most restrictive controls are not implemented and validate if compensating controls are adequate.

n

· Assess and implement MS recommended Blocklist (MRB) across workstations.

n





· Conduct a Business Impact Assessment on workstations to assess the operational impact of blocking MRB-listed applications.

n

· Validate the coverage of current ‘LOLBAS’ blocking against the MRB to ensure that applications already blocked in the environment are aligned with the MRB blocklist.

n

· Identify and implement compensating controls for applications that cannot be blocked due to operational dependencies, ensuring security is maintained in such cases.

n

· Ensure changes made to implement MRB are fully documented, and that the implementation aligns with updated Essential Eight ML2 requirements, ready for audit purposes.

n

· Extract application usage data from Microsoft Defender to determine whether applications/executables on the recommended block list.

n

· Implement continuous monitoring of MRB compliance and update it regularly to address current vulnerabilities, ensuring it remains effective.

n

· Ensure that MRB blocking rules apply correctly to both privileged and standard user groups, considering role-based access control (RBAC) for different user types and their specific needs

n

Required Skills and Experience:

n

· Proven experience in system hardening, security auditing, or compliance.

n

· Familiarity with ASD Essential Eight and Microsoft security baselines.

n

· Strong understanding of Windows event logging and PowerShell security features.

n

· Experience with Intune, Group Policy, or other configuration management tools.

n

· Excellent documentation and analytical skills.

n

· Familiarity with ITIL framework and processes, particularly in change and incident management.

n

· Excellent verbal and written communication skills.

#J-18808-Ljbffr

📌 Endpoint Security & Compliance Specialist (Sydney)
🏢 Xpt Software Australia
📍 Sydney