Workplace Security Engineer

Il y a 3 heures

Antwerp, Flanders, Belgique Xintas Temps plein
ppYou will take end-to-end ownership of designing, implementing, and deploying workplace hardening and application control within a complex enterprise environment. You will lead the introduction of a default-deny security model using Windows Defender Application Control (WDAC) and/or AppLocker, integrate these solutions with Microsoft Intune and Microsoft Defender, and ensure a controlled, measurable, and secure adoption across the organization. /p h3Objective /h3 pStrengthen endpoint security by delivering a robust, centrally managed, and organization-wide framework for endpoint hardening and application control. /p h3Responsibilities /h3 ul liDesign and implement an enterprise-wide hardening framework for Windows endpoints /li liTranslate security requirements into technical configurations, policies, and security baselines /li liImplement Windows Defender Application Control (WDAC) and/or AppLocker /li liEstablish a reliable code-signing and trust model /li liDefine governance processes for application exceptions and policy management /li /ul h3Microsoft Intune Defender Integration /h3 ul liConfigure and deploy security policies through Microsoft Intune /li liIntegrate application control with Microsoft Defender for Endpoint for monitoring, detection, and reporting /li liAutomate policy deployment and lifecycle management /li /ul h3Phased Rollout Continuous Optimization /h3 ul liDevelop and execute a controlled deployment strategy (pilot
- phased rollout
- organization-wide adoption) /li liImplement monitoring, logging, and feedback mechanisms /li liContinuously fine-tune policies based on telemetry, security incidents, and user impact /li /ul h3Collaboration Stakeholder Management /h3 ul liWork closely with Workplace Services, the Security Operations Center (SOC), IT Operations, development teams, and external vendors /li liProvide guidance on the security implications of applications, software updates, and new technologies /li liCommunicate risks, impact, and project progress clearly to both technical and business stakeholders /li /ul h3Required Knowledge Experience /h3 ul liExtensive hands-on experience with bWDAC /b, bAppLocker /b, bMicrosoft Intune /b, bMicrosoft Defender /b, and Windows endpoint management /li liStrong background in endpoint security, system hardening, Zero Trust architectures, and default-deny security models /li liExperience working in large-scale enterprise environments and managing organization-wide deployments /li liStrong analytical skills with the ability to interpret telemetry, security events, and log data /li liExcellent communication skills with the ability to clearly explain technical decisions and security recommendations /li /ul h3Expected Outcome /h3 pA fully deployed, stable, and centrally managed application control and endpoint hardening framework that significantly strengthens endpoint security, minimizes the attack surface, and integrates seamlessly with existing SOC processes, security operations, and enterprise tooling. /p /p