Job Description
Role Overview
n
n
We are looking for a hands -on Security Controls Validation Engineer with
n strong experience in vulnerability management, security control assessment, and
n enterprise security technologies.
n This role focuses on identifying security gaps across enterprise environments,
n validating the effectiveness of existing security controls, and working closely
n with infrastructure, application, and endpoint security teams to drive
n remediation outcomes.
n The ideal candidate should have practical exposure to vulnerability management
n platforms, endpoint security technologies, and security frameworks such as NIST
n and Essential Eight. The role requires a strong understanding of enterprise
n security operations and the ability to provide practical, risk -based
n recommendations.
n
Key Responsibilities
n
n
n
Perform vulnerability assessments across servers, endpoints, and
n infrastructure environments using enterprise security tools and manual
n validation techniques
n
n
Analyse security gaps and assess risk exposure across endpoint,
n infrastructure, and application environments
n
n
Validate effectiveness of existing security controls and identify
n gaps where vulnerabilities exist despite security tooling being in place
n
n
Work closely with Infrastructure, Endpoint Security, Cloud, and
n Application teams to support remediation and closure of identified
n security findings
n
n
Re -test and validate remediation activities to ensure
n vulnerabilities and control gaps are effectively addressed
n
n
Provide practical and implementable security recommendations
n aligned with enterprise operational constraints
n
n
Support targeted security validation activities to assess
n effectiveness of endpoint protection and security policies
n
n
Assist in troubleshooting issues where security controls or
n endpoint policies impact business applications
n
n




Support attack simulation and control validation exercises to
n assess detection and response capabilities
n
n
Contribute to security assessments aligned with frameworks such as
n NIST and Essential Eight
n
n
Assist in validating compliance gaps identified during internal and
n external security audits
n
n
Provide clear and actionable reporting for technical teams,
n leadership stakeholders, and audit requirements
n
n
Support vulnerability management lifecycle activities including
n risk prioritisation, remediation tracking, and closure validation
n n
Technical Exposure
n
n
n
Microsoft Defender for Endpoint (MDE)
n
n
Rapid7 InsightVM or similar vulnerability management platforms
n
n
Trellix ePO / Application Control (AWL)
n
n
Endpoint security technologies and enterprise security tooling
n
n
Windows and/or Linux server environments
n
n
Exposure to SIEM platforms such as Splunk is advantageous
n n
What We're Looking For
n
n
n
Strong experience in vulnerability management and security control
n validation
n
n
Good understanding of enterprise security controls, endpoint
n security, and infrastructure security concepts
n
n
Experience analysing vulnerability data and prioritising
n remediation activities based on risk
n
n
Working knowledge of security frameworks such as NIST and Essential
n Eight
n
n
Exposure to enterprise endpoint security and vulnerability
n management platforms
n
n
Ability to collaborate effectively with cross -functional technical
n teams
n
n
Solid communication, reporting, and stakeholder management skills
n
n
Self -driven, practical, and outcome -focused approach
n n
Nice to Have
n
n
n
Experience in large enterprise environments
n
n
Exposure to cloud security concepts and hybrid infrastructure
n environments
n
n
Basic scripting or automation knowledge (PowerShell, Python, or
n Bash)
n
n
Exposure to security operations or incident response activities
n
n
n
n
n
n

📌 Security Controls Validation Engineer (Melbourne)
🏢 XPT Software Australia Pty
📍 Melbourne