Enterprise Security Engineer in Sydney

Work withcutting-edge AI technology that helps make the world a safer and more secure place.

Drone Shield (ASX: DRO) develops market-leading counter-drone solutions used by militaryorganisations, government agencies, airports, critical infrastructure operators, and law enforcementoperatingin some of the most challenging and high-stakes environments in the world.

Employees work at the forefront of innovation, solving complex technical problems and delivering mission-critical capabilities where performance, reliability, and speed matter.

As an ASX200-listed company and theworld'sonly publicly listed pure-play counter-drone business, Drone Shield is experiencing rapid growth.

Revenue increased from A$57 million in 2024 to more than A$217 million in 2025, supported by record profitability, a global sales pipeline exceeding A$2.5 billion, and annual R&D investment of over A$50 million.

Since 2017, Drone Shield has grown from 11 employees to more than 550 globally, with operations across Australia, the United States, Europe, and the Middle East, supporting customers in over 70 countries.

The role is based at Drone Shield's Sydney headquarters, which houses corporate, commercial, engineering, and operational teams supporting the company's global growth and customer base.

About the role

Drone Shield is seeking an Enterprise Security Engineer to join the Enterprise Security (Ent Sec) team in Sydney.

This is a mid-level, hands-on engineering role for someone with a few years in IT or security who is ready to take ownership of real systems and grow within the team.

Ent Sec is a small team inside the wider Security function.

It sits alongside Detection & Response (Dn R) and Product Security, and works closely with IT.

Ent Sec owns the security of Drone Shield's corporate environment: identity, endpoints, patching and vulnerability management, remote access, and the technical controls that back our ISO 27001, Essential Eight and CMMC obligations.

The team today is the Team Lead, a Junior Enterprise Security Engineer and a DISP / Physical Security Officer.

Our adversaries are sophisticated and well resourced.

To protect Drone Shield we focus on the biggest risks, remove whole classes of threat where we can, automate so that a small team can cover a growing company, and continually raise the cost for the attacker.

The partnership model matters here.

IT builds and runs the foundational platforms.

Ent Sec deploys and enforces security controls on them and makes sure the right telemetry exists.

Dn R turns that telemetry into detections and response playbooks.

You will be working across all three every week.

You will inherit real platforms on day one and be expected to run them, not just assist.

In return you get a lot of scope, direct exposure to the Team Lead and CISO, and a clear path to further career development.

Strong communication skills and being a hands-on engineer are a must.

Responsibilities, Duties and Expectations

• Own and improve security controls across the corporate fleet: Windows via Intune, mac OS via Jamf, Linux via Landscape
• Administer and harden identity: Entra ID, Conditional Access, privileged access, phishing-resistant MFA
• Run vulnerability management across the corporate environment: scanning, prioritisation, patch deployment and chasing remediation to closure
• Keep up to date with vulnerabilities and CVEs relevant to our stack and drive their mitigation
• Operate and tune endpoint protection (Defender for Endpoint, application control) and work with Dn R on telemetry and detection coverage
• Respond to security incidents involving the corporate environment, and contribute to post-incident fixes
• Build and maintain the technical evidence for ISO 27001, Essential Eight and CMMC controls that Ent Sec owns
• Review and assess new software, Saa S and third-party integrations before they are approved for use
• Automate repeatable work with scripts and platform-native tooling, and document what you build
• Collect metrics on control coverage and posture, identify patterns and turn them into actions
• Contribute to the Enterprise Security roadmap and take ownership of initiatives within it
• Manage concurrent tasks and work with IT, Dn R and the wider business to solve problems

Qualifications, Experience and Skills

• Bachelor degree in Computer Science, Information Technology or a similar technical field, or equivalent practical experience
• 3 to 5 years in hands-on IT or security engineering roles. Backgrounds that fit well include:
• Systems or endpoint engineer in a Microsoft 365 / Entra environment
• IT engineer or systems administrator with a security focus
• Security engineer supporting corporate infrastructure
• On-the-tools engineering experience. This is not a governance-only role
• Excellent communication skills, able to explain technical risk to non-technical stakeholders
• Strong problem-solving and analytical skills
• Entra ID administration, including Conditional Access and identity governance
• Endpoint management with Intune and/or Jamf, including configuration profiles, compliance and app deployment
• Endpoint hardening and attack surface reduction (CIS benchmarks, Essential Eight, application control)
• Vulnerability management and patch deployment across Windows and mac OS
• Scripting for automation in Power Shell, Python, Go or bash
• Comfortable in a mixed Windows, mac OS and Linux environment
• Systems thinking: designing fixes that improve the system rather than patching the symptom
• Linux endpoint management (Canonical Landscape) and secure remote access approaches
• Experience gathering or presenting evidence for ISO 27001, Essential Eight or CMMC
• Third-party or Saa S security assessment experience
• Infrastructure as Code and hybrid cloud environments
• Experimentation with LLM tooling to automate security operations
• An existing AGSVA clearance or the ability to obtain one.
• Growth Path

This role is designed for someone who already brings a degree of autonomy and can take real ownership of initiatives.

Working directly with the Enterprise Security Team Lead, the right candidate will take on the corporate security platforms end to end, deepen their technical depth across identity and endpoint security, and broaden their strategic view across the Enterprise Security program.

Progression will be recognised and rewarded as capability and contribution are demonstrated.

Note for recruitment agencies: We do not accept unsolicited candidates from external recruiters unless specifically instructed.

Data Privacy

Drone Shield Group Pty Ltd collects and processes personal information for recruitment and hiring purposes.

Where applicable, personal information is processed on the basis of Drone Shield's legitimate interests in assessing and selecting candidates for employment.

For further information regarding how we collect, use, disclose, store and retain personal information, including your privacy rights, please refer to our

• Privacy
• Policy: https://www. droneshield. com/privacy-policy

Be careful - Don`t provide your bank or credit card details when applying for jobs.

Don't transfer any money or complete suspicious online surveys.

If you see something suspicious, report this job ad .

#J-18808-Ljbffr