Senior Microsoft Security Engineer (Defender & Vulnerability Management) in Canberra

We are seeking an experienced Vulnerability Management Specialist to support and continuously improve enterprise vulnerability management and cyber security capabilities within a complex and highly secure environment.

This role is responsible for enhancing security visibility across endpoints, servers, cloud platforms and other critical assets, with a strong focus on the Microsoft security ecosystem. You will investigate vulnerabilities, analyse security data, drive remediation activities, and work closely with technical stakeholders to strengthen the organisation's overall cyber security posture.

This is a hands-on technical role suited to an experienced cyber security professional with expertise in vulnerability management, Microsoft Defender technologies, and security operations.

Key Responsibilities

• Administer, configure and optimise Microsoft Defender security capabilities, with a particular focus on vulnerability management.
• Monitor and improve endpoint and server security visibility, identifying coverage gaps, onboarding issues and data quality concerns.
• Conduct vulnerability assessments and analyse findings from Microsoft Defender, threat intelligence feeds and other security data sources.
• Investigate emerging vulnerabilities, exploits and cyber threats to determine potential exposure and business impact.
• Collaborate with infrastructure, cloud, application and cyber security teams to implement patches, mitigations and compensating controls.
• Support risk-based vulnerability prioritisation using threat intelligence, exploitability, asset criticality and operational context.
• Develop and maintain dashboards, reports, metrics and operational views to improve visibility of vulnerabilities and remediation activities.
• Monitor remediation progress and drive outcomes through effective stakeholder engagement.
• Support integration and effective use of security information across the broader Microsoft security ecosystem, including Microsoft Sentinel where applicable.
• Contribute to continuous improvement initiatives that strengthen cyber resilience and vulnerability management maturity.

Required Skills and Experience

• NV1 Security Clearance
• Minimum 5 years' experience in vulnerability management, endpoint security, security operations or cyber security engineering within large enterprise environments.
• Hands-on experience administering and operating Microsoft Defender for Vulnerability Management and related Microsoft security technologies.
• Strong understanding of vulnerability management processes, including:
• Asset visibility
• Vulnerability identification
• Validation and assessment
• Risk prioritisation
• Remediation and mitigation
• Risk acceptance
• Experience investigating vulnerability, endpoint and threat intelligence data and translating findings into actionable recommendations.
• Experience identifying and resolving security visibility, onboarding and configuration issues across enterprise environments.
• Proven ability to develop dashboards, reports, metrics and operational security views.
• Strong stakeholder engagement skills with the ability to drive remediation activities across multiple technical teams.
• Excellent written and verbal communication skills.

Additional Experience

• Experience with Microsoft Sentinel and security monitoring platforms.
• Exposure to Windows, Linux, cloud and network infrastructure environments.
• Knowledge of security frameworks and standards, such as Essential Eight, ISM, PSPF, NIST or ISO 27001.
• Experience working within government, defence, financial services or other highly regulated environments.
• Exposure to Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud and broader Microsoft security technologies.

Technical Environment

Experience with some or all of the following technologies will be highly regarded:

• Microsoft Defender for Endpoint
• Microsoft Defender Vulnerability Management
• Microsoft Defender XDR
• Microsoft Sentinel
• Microsoft Entra ID
• Microsoft Azure
• Windows Server
• Linux Platforms
• Active Directory
• Endpoint Security and Exposure Management
• Threat Intelligence Platforms

#J-18808-Ljbffr