Our client is seeking an experienced EUC Security Engineer to join its Information Security team in Sydney. This is an excellent opportunity for a hands-on security professional to play a key role in strengthening the organisation’s end-user computing security posture, protecting devices, users and platforms across a complex enterprise environment.

The Opportunity

As part of the Information Security – Offensive team, you will be responsible for engineering, implementing and maintaining security controls across the end-user computing environment, including Windows, macOS, mobile devices, browsers and Microsoft services.

You will act as a technical subject matter expert, partnering closely with Information Security, Endpoint Services, Microsoft 365 and other engineering teams to strengthen security standards, address vulnerabilities, automate remediation and continuously improve security controls without compromising the end-user experience.

Key Responsibilities

- Design, implement and maintain hardened endpoint security baselines aligned with the Essential Eight and internal security standards.

- Engineer and optimise endpoint protection, device compliance, application control, encryption, privileged access and browser security controls.

- Manage and enhance security capabilities across Microsoft Intune, Defender for Endpoint, Entra ID and Conditional Access.

- Identify, investigate and remediate endpoint vulnerabilities, configuration weaknesses and security control gaps.

- Integrate endpoint security telemetry with SIEM and incident response processes to support effective threat investigation and response.

- Develop automation to streamline security configuration validation, remediation and evidence collection.

- Assess and manage endpoint security risk exemptions,



documenting business justifications, residual risks and compensating controls.

- Develop and maintain security standards, technical guidance and operational playbooks to promote consistent security practices.

To be successful in this role, you will bring solid hands-on endpoint security engineering experience, a practical approach to automation and the ability to balance security requirements with business and operational needs.

Skills and experience required

- Microsoft security expertise: Strong experience engineering and managing Microsoft Intune, Defender for Endpoint and Entra ID within a complex enterprise environment.

- Endpoint security: In-depth knowledge of Windows and macOS security, mobile device management (MDM), browser security and endpoint platform controls.

- Automation and scripting: Practical experience with PowerShell and Microsoft Graph to automate security configuration, validation and remediation.

- Security frameworks and controls: Experience implementing the Essential Eight and CIS benchmarks, alongside EDR/XDR, BitLocker or File Vault, application control, privileged access and vulnerability management.

- Troubleshooting: Strong analytical and problem-solving skills, with the ability to investigate and resolve complex endpoint security issues.

- Stakeholder engagement: Excellent communication skills and the ability to collaborate effectively with technical teams and business stakeholders.

- Continuous improvement: A proactive, self-motivated approach to improving security controls, processes and operational outcomes.

- Certifications: Relevant Microsoft security certifications will be highly regarded.

If you have the requested skills and experience required, then please apply NOW to [email protected].

📌 Security Engineer - End User Compute (Sydney)
🏢 Novon On Demand
📍 Sydney