Systems Security Engineer

About the role

Anduril Industries is seeking a hands‑on Systems Security Engineer to drive security engineering and operational security across its Australian and corporate ICT environments. You will work with a small infrastructure team to design, harden and operate networks accredited under Australian Government security frameworks.

Key responsibilities

• Own and operate security tooling across Australian and corporate networks, including deployment, configuration, tuning, patching and lifecycle management.
• Administer and mature the Australian network’s security stack: application whitelisting, SIEM, vulnerability scanning, endpoint antivirus and privileged access management.
• Develop and maintain SIEM use cases, detection rules, correlation searches and dashboards.
• Conduct regular vulnerability assessments, prioritize remediation and track closure through the POAM register.
• Perform security hardening of Windows Server, Active Directory, virtualization platforms, storage infrastructure and network devices per ASD guidance and the ISM.
• Support system accreditation activities, preparing security documentation (SSPs, SRMPs, IRPs, DLDs) and gathering evidence for assessments.

Required profile

• Three or more years of experience in cyber security engineering, security operations, systems security, infrastructure security or security architecture.
• Hands‑on experience with at least three security platform types such as application whitelisting, SIEM, vulnerability scanning, EDR, PAM or IAM.
• Strong understanding of Active Directory, Group Policy, Windows Server hardening and Kerberos authentication.
• Familiarity with Australian Government security frameworks: ISM, PSPF, Essential Eight Maturity Model and related ASD guidance.
• Ability to obtain and maintain an NV2 security clearance.

Required skills

• Application whitelisting / application control
• SIEM and log management
• Vulnerability scanning and assessment
• Endpoint detection and response (EDR)
• Privileged access management (PAM)
• Identity and access management (IAM)
• Active Directory, Group Policy, Windows Server hardening, Kerberos
• PowerShell, Python, Bash scripting
• VMware vSphere administration and security hardening
• PKI, certificate lifecycle management, TLS/mTLS implementation