Systems Security EngineerNew

Anduril Industries
Apply now

The opportunity

We are seeking an Infrastructure Security Engineer to drive security engineering and operational security across both our Australian and corporate ICT environments. You will work alongside a small infrastructure team responsible for designing, hardening and operating networks…

What you'll do

  • This is not an ISSO or ISSM role. This is a technical, hands-on security engineering position.

  • Own and operate security tooling across Australian and corporate networks,: including deployment, configuration, tuning, patching and lifecycle management.

  • Administer and mature the Australian network’s security stack, including: application whitelisting, SIEM, vulnerability scanning, endpoint antivirus and privileged access management.

  • Support corporate network security platforms, including endpoint detection: and response, identity and access management, privileged access management, and device trust and compliance.

  • Drive Essential Eight maturity uplift across Australian environments, with a: focus on application control, patching, privileged access restriction, multi-factor authentication and regular backups.

  • Develop and maintain SIEM use cases, detection rules, correlation searches: and dashboards to provide actionable visibility across the environment.

What they're looking for

  • An existing NV2 security clearance.
  • Experience working in or supporting high-security environments accredited: under Australian Government frameworks.
  • Experience with Windows Server and VMware vSphere administration and security hardening.
  • Experience with enterprise backup and recovery platforms and an understanding: of data protection requirements under the ISM.
  • Familiarity with device trust and compliance tooling.
  • Experience developing SIEM dashboards, alerts, detection content and integrations.
  • Scripting skills in PowerShell, Python or Bash for automation of security operations tasks.
  • Familiarity with PKI, certificate lifecycle management and TLS/mTLS implementation.