Enterprise Security Engineer

About the role

DroneShield is looking for a hands‑on Enterprise Security Engineer to join its Enterprise Security (EntSec) team in Sydney. This mid‑level position will own and operate corporate security platforms, working closely with IT, Detection & Response and the wider business.

Key responsibilities

• Own and improve security controls across Windows (Intune), macOS (Jamf) and Linux (Landscape) fleets.
• Administer identity security in Entra ID, including Conditional Access, privileged access and phishing‑resistant MFA.
• Run vulnerability management: scanning, prioritisation, patch deployment and remediation tracking.
• Operate and tune endpoint protection (Microsoft Defender for Endpoint) and collaborate on telemetry and detection coverage.
• Respond to corporate security incidents and contribute to post‑incident remediation.
• Build and maintain technical evidence for ISO 27001, Essential Eight and CMMC compliance.

Required profile

• 3–5 years of hands‑on IT or security engineering experience in a Microsoft‑centric environment.
• Strong communication skills and ability to explain technical risk to non‑technical stakeholders.
• Proven problem‑solving and analytical abilities with a systems‑thinking mindset.

Required skills

• Entra ID administration (Conditional Access, identity governance).
• Endpoint management with Intune and/or Jamf.
• Endpoint hardening (CIS benchmarks, Essential Eight, application control).
• Vulnerability management and patch deployment on Windows, macOS and Linux.
• Scripting for automation: PowerShell, Python, Go or Bash.
• Microsoft Defender for Endpoint / XDR administration.