Years of Experience: 8–10+ years
FTE: 1
Security Clearance: Current Australian Government Security Clearance (Baseline, NV1 or higher) or eligibility to obtain one
Working Arrangement (Remote, Onsite, Hybrid): Onsite
iDiC Client Name: Client has requested not to be identified in adverts - contact Talent@idic.com.au for further information.
Rate Information: Rate to iDiC $140–$180/hr ex GST (guide only, value for money assessment applies)
Exclusivity: iDiC sole external sourcing channel
Additional Notes: Strong focus on Endpoint Security, Data Loss Prevention (DLP), Vulnerability Management, Trellix and Tenable platforms. Submission due ASAP. Interview timeframe approximately 2 weeks from submission.
Onboarding Requirements: ID, Working Rights & 2 Completed Reference Checks required at Offer Stage.
Permission to Represent (PTR): Please upload a signed PTR, including the role title to the Cover page section after clicking "apply"

POSITION OVERVIEW

We are seeking an experienced Endpoint Security Lead to provide technical leadership and delivery accountability across enterprise endpoint security, data loss prevention, and vulnerability management initiatives. The role is responsible for ensuring solution integrity, delivery quality, and operational readiness across endpoint protection, EDR, DLP controls, vulnerability scanning, and remediation activities. Acting as the senior client-facing technical authority, you will work closely with security, infrastructure, operations, and application teams in complex and highly regulated environments.

ABOUT THE CLIENT

The client operates within the systems integration and technology services sector, delivering secure, enterprise-scale solutions. They support complex infrastructure across government or highly regulated industries, with a strong focus on automation, standardisation, and data security.

KEY RESPONSIBILITIES

• Own the end-to-end technical delivery of endpoint security, DLP, and vulnerability management workstreams.
• Define and govern target state endpoint security architecture, implementation patterns, and integration approaches.
• Lead technical planning, prioritisation, sequencing, and dependency management activities.
• Act as the primary client-facing technical authority for endpoint protection, DLP, and vulnerability management solutions.
• Provide leadership and guidance to endpoint security engineers, analysts, consultants, testers, and operational support teams.
• Oversee implementation and tuning of Trellix endpoint security controls, including policy configuration, endpoint protection, alert management, and operational readiness.
• Lead the implementation and operationalisation of Tenable vulnerability management capabilities.
• Develop vulnerability scanning strategies, asset coverage approaches, reporting frameworks, and remediation workflows.
• Ensure endpoint security controls align with security policies, compliance obligations, and operational support requirements.
• Manage technical risks, delivery issues, cross-platform dependencies, and security control gaps.
• Review and approve architecture artefacts, detailed designs, configuration standards, operational runbooks, and handover documentation.

ESSENTIAL REQUIREMENTS

• Approximately 10 years' experience in endpoint security, security engineering, infrastructure security, or cyber security delivery roles.
• Proven experience leading endpoint security and/or vulnerability management teams within enterprise environments.
• Strong understanding of:
  • Endpoint Protection
  • Endpoint Detection and Response (EDR)
  • Data Loss Prevention (DLP)
  • Vulnerability Management
  • Security Control Tuning
  • Operational Security Integration
• Hands-on or architecture-level experience with Trellix and Tenable, or equivalent enterprise security platforms.
• Ability to engage senior stakeholders and lead technical workshops.
• Strong understanding of security risk management, operational readiness, and delivery assurance.
• Experience operating within regulated, security-sensitive, or complex enterprise environments.
• Current Australian Government Security Clearance (Baseline, NV1 or higher), or eligibility to obtain one.

DESIRABLE SKILLS

• Experience with SIEM integration and security monitoring platforms.
• Experience with ITSM integration and security operations processes.
• Knowledge of enterprise security architecture frameworks.
• Experience with threat prevention technologies and endpoint hardening.
• Experience in asset discovery and enterprise vulnerability assessment programmes.
• Strong documentation, governance, and reporting skills.
• Ability to mentor and lead multidisciplinary technical teams.
• Experience delivering security transformation or large-scale cyber security programmes.