IT Client Security Engineer

apeirum; Barcelona; Presencial; EUR 55.000 - 85.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Permanent contract

Flexible working hours

Barcelona-based role

International collaboration

Descripción de la vacante

apeirum invites applications for an IT Client Security Engineer based in Barcelona. You will design, implement and operate security solutions for Windows endpoints, using Microsoft Intune, Defender for Endpoint, and Microsoft 365 E5 Security & Compliance to harden the estate.

You will build baselines, monitor incidents, automate with PowerShell, and work with the CISO to align endpoint security with enterprise risk.

Formación

• Strong expertise in Windows 10/11, Intune/Endpoint Manager, Defender for Endpoint, and Microsoft 365 E5 Security & Compliance.
• Endpoint hardening using CIS benchmarks and security baselines.
• PowerShell scripting and automation skills.
• Several years in endpoint management / client security with a security-focused mindset.
• Very good English.
• Based in Spain (Barcelona).
• Degree in computer science.

Responsabilidades

• Design, implement and operate client security solutions for Windows endpoints.
• Build and continuously improve security baselines, hardening standards and compliance policies.
• Operate, configure and optimise Defender for Endpoint, Defender Antivirus, Firewall and ASR rules.
• Leverage Microsoft 365 E5 security - Conditional Access, Endpoint Security, Identity Protection.
• Analyse, investigate and remediate endpoint security incidents.
• Create and maintain technical concepts, documentation and procedures.
• Own and operate endpoint vulnerability management: identify, monitor, remediate vulnerabilities.
• Ensure continuous monitoring and timely remediation of endpoint security weaknesses.
• Collaborate with the CISO to align endpoint security with enterprise risk and compliance.

Conocimientos

Windows 10/11

PowerShell scripting

Automation

Endpoint security mindset

English language

Analytical mindset

Educación

Degree in Computer Science

Herramientas

Intune / Endpoint Manager

Defender for Endpoint

Microsoft 365 E5 Security & Compliance

Descripción del empleo

apeirum partners with European companies to place senior IT talent. For one of our client partners in Barcelona we're hiring an IT Client Security Engineer to secure and harden their Windows endpoint estate - Microsoft Intune, Defender for Endpoint, and Microsoft 365 E5 security. Barcelona-based, permanent, with regular travel (10-20%).

Tasks

• Design, implement and operate client security solutions for Windows endpoints.
• Build and continuously improve security baselines, hardening standards and compliance policies.
• Operate, configure and optimise Microsoft Defender for Endpoint, Defender Antivirus, Firewall and ASR rules.
• Leverage Microsoft 365 E5 security - Conditional Access, Endpoint Security, Identity Protection.
• Analyse, investigate and remediate endpoint security incidents.
• Create and maintain technical concepts, documentation and operational procedures.
• Own and operate endpoint vulnerability management (identify, monitor, prioritise and remediate vulnerabilities).
• Ensure continuous monitoring and timely remediation of endpoint security weaknesses.
• Work closely with the CISO to align endpoint security with enterprise risk and compliance requirements.

Requirements

• Strong expertise in Microsoft Windows 10/11, Intune / Endpoint Manager, Defender for Endpoint, and Microsoft 365 E5 Security & Compliance.
• Endpoint hardening (Microsoft Security Baselines, CIS benchmarks).
• PowerShell scripting and automation.
• Several years in endpoint management / client security; strong analytical, security-focused mindset.
• Very good English.
• Based in Spain (Barcelona).
• Degree in computer science.

Nice to have

• Azure AD / Microsoft Entra ID.

Benefits

• Own a real client-security mandate in a modern Microsoft environment.
• A dynamic and friendly workplace in a tech hub in Barcelona, combining startup energy with the stability of a Swiss industrial leader.
• International collaboration with global teams, especially in Switzerland, and external integration partners.
• Opportunities for continuous learning and growth through the internal academy and professional development programs.
• A permanent contract, competitive compensation, and flexible working hours supporting work-life balance.