Role OverviewWe are looking for a hands -on Security Controls Validation Engineer withstrong experience in vulnerability management, security control assessment, andenterprise security technologies.
This role focuses on identifying security gaps across enterprise environments,validating the effectiveness of existing security controls, and working closelywith infrastructure, application, and endpoint security teams to driveremediation outcomes.
The ideal candidate should have practical exposure to vulnerability managementplatforms, endpoint security technologies, and security frameworks such as NISTand Essential Eight.
The role requires a strong understanding of enterprisesecurity operations and the ability to provide practical, risk -basedrecommendations.Key ResponsibilitiesPerform vulnerability assessments across servers, endpoints, and infrastructure environments using enterprise security tools and manual validation techniquesAnalyse security gaps and assess risk exposure across endpoint, infrastructure, and application environmentsValidate effectiveness of existing security controls and identify gaps where vulnerabilities exist despite security tooling being in placeWork closely with Infrastructure, Endpoint Security, Cloud, and Application teams to support remediation and closure of identified security findingsRe -test and validate remediation activities to ensure vulnerabilities and control gaps are effectively addressedProvide practical and implementable security recommendations aligned with enterprise operational constraintsSupport targeted security validation activities to assess effectiveness of endpoint protection and security policiesAssist in troubleshooting issues where security controls or endpoint policies impact business applicationsSupport attack simulation and control validation exercises to assess detection and response capabilitiesContribute to security assessments aligned with frameworks such as NIST and Essential EightAssist in validating compliance gaps identified during internal and external security auditsProvide explicit and actionable reporting for technical teams, leadership stakeholders, and audit requirementsSupport vulnerability management lifecycle activities including risk prioritisation, remediation tracking, and closure validationTechnical ExposureMicrosoft Defender for Endpoint (MDE)Rapid7 InsightVM or similar vulnerability management platformsTrellix ePO / Application Control (AWL)Endpoint security technologies and enterprise security toolingWindows and/or Linux server environmentsExposure to SIEM platforms such as Splunk is advantageousWhat We're Looking ForStrong experience in vulnerability management and security control validationGood understanding of enterprise security controls, endpoint security, and infrastructure security conceptsExperience analysing vulnerability data and prioritising remediation activities based on riskWorking knowledge of security frameworks such as NIST and Essential EightExposure to enterprise endpoint security and vulnerability management platformsAbility to collaborate effectively with cross -functional technical teamsStrong communication, reporting, and stakeholder management skillsSelf -driven, practical, and outcome -focused approachNice to HaveExperience in large enterprise environmentsExposure to cloud security concepts and hybrid infrastructure environmentsBasic scripting or automation knowledge (PowerShell, Python, or Bash)Exposure to security operations or incident response activities

📌 Security Controls Validation Engineer (Melbourne)
🏢 XPT Software Australia Pty
📍 Melbourne