Microsoft Endpoint Security Engineer

Looking for a hands-on Endpoint Security Engineer who enjoys solving complex security challenges while improving the end-user experience. This role sits within a high-performing security team and focuses on securing and optimising enterprise endpoints across Windows, macOS, mobile and Microsoft 365 environments.

You'll be responsible for engineering, implementing and continuously improving endpoint security controls across a large enterprise environment. Working closely with infrastructure, M365, platform and security teams, you'll help drive security outcomes while ensuring reliability and usability remain front of mind.

• Design and maintain endpoint security baselines across Windows, macOS and mobile devices.
• Manage and optimise Microsoft Intune, Defender for Endpoint, Entra ID and Conditional Access.
• Drive remediation of endpoint vulnerabilities and security findings.
• Automate security controls, compliance validation and reporting using PowerShell and Microsoft Graph.
• Enhance EDR/XDR, application control, encryption and privileged access capabilities.
• Partner with technology teams to implement security improvements and reduce risk.
• Develop security standards, playbooks, exceptions and operational guidance.

• Strong experience with Intune, Defender for Endpoint, Entra ID and Conditional Access.
• Solid understanding of Windows, macOS, mobile device management and endpoint security.
• Experience with PowerShell automation and Microsoft Graph.
• Knowledge of Essential Eight, CIS benchmarks, EDR/XDR, BitLocker/FileVault and vulnerability management.
• Able to balance security requirements with operational realities and user experience.
• Strong communicator who can engage technical and non-technical stakeholders alike.