Endpoint Protection Engineer

Richemont; Moscavide; Presencial; EUR 48 000 - 70 000; Tempo integral

Resumo da oferta

Richemont in Lisbon, Portugal seeks an Endpoint Protection Engineer to design, implement and manage endpoint security across IT and OT environments. You will work with Security, Infrastructure and Workplace teams to strengthen protection, support cloud-native device management and ensure compliance with security standards.

The role requires 3+ years of experience with Windows, macOS, iOS and Android endpoints, hands-on use of Defender for Endpoint, Intune and Workspace ONE, and scripting skills

Qualificações

• Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 3+ years of experience managing endpoint security solutions across Windows, macOS, iOS, and Android.
• Hands-on experience with Defender for Endpoint, Intune, Workspace ONE, Tanium, Cortex XDR/XSIAM, or similar technologies.
• Strong knowledge of endpoint security, compliance, hardening, encryption, patching, and vulnerability management.
• Experience with PowerShell and Microsoft Graph API.
• Working knowledge of CIS, NIST, and ISO 27001 frameworks.

Responsabilidades

• Deploy, configure, and support endpoint security solutions, including EDR/XDR, Endpoint Protection, Mobile Threat Defense, DLP, and device compliance controls.
• Manage Windows, macOS, iOS, and Android endpoints using Intune and Workspace ONE.
• Support cloud-native endpoint management and modern device provisioning.
• Maintain security baselines, patching, hardening, encryption, and vulnerability remediation.
• Integrate endpoint security platforms with enterprise services and automation tools.
• Monitor endpoint security posture and investigate security incidents.
• Perform threat exposure assessments and support remediation activities.
• Maintain endpoint standards, operational procedures, and compliance documentation.
• Support audits and compliance requirements aligned with ISO 27001, NIST, and CIS frameworks.
• Collaborate with IT, Security, OT, and vendor teams to improve endpoint security capabilities.
• Provide technical guidance and share knowledge with colleagues and support teams.
• Contribute to automation and process improvements.

Conhecimentos

Endpoint security management

Defender for Endpoint

Intune

Workspace ONE

Tanium

Cortex XDR

PowerShell

Microsoft Graph API

Jira

Confluence

English proficiency

ITIL/ITSM

Agile practices

Formação académica

Bachelor's degree in Computer Science, Information Security, or equivalent experience

Ferramentas

Intune

Workspace ONE

Tanium

Cortex XDR/XSIAM

Microsoft Defender for Endpoint

PowerShell

Microsoft Graph API

Descrição da oferta de emprego

Main Purpose

As an Endpoint Protection Engineer, you will design, implement, and manage endpoint security solutions across corporate IT and Operational Technology (OT) environments. Working closely with Security, Infrastructure, and Workplace teams, you will strengthen endpoint protection, support cloud-native device management, and ensure compliance with security standards and best practices.

Key Responsibilities

Endpoint Security & Management

• Deploy, configure, and support endpoint security solutions, including EDR/XDR, Endpoint Protection, Mobile Threat Defense, DLP, and device compliance controls.
• Manage Windows, macOS, iOS, and Android endpoints using platforms such as Intune and Workspace ONE.
• Support cloud-native endpoint management and modern device provisioning.
• Maintain security baselines, patching, hardening, encryption, and vulnerability remediation.
• Integrate endpoint security platforms with enterprise services and automation tools.

Operations & Governance

• Monitor endpoint security posture and investigate security incidents.
• Perform threat exposure assessments and support remediation activities.
• Maintain endpoint standards, operational procedures, and compliance documentation.
• Support audits and compliance requirements aligned with ISO 27001, NIST, and CIS frameworks.

Collaboration & Continuous Improvement

• Collaborate with IT, Security, OT, and vendor teams to improve endpoint security capabilities.
• Provide technical guidance and share knowledge with colleagues and support teams.
• Contribute to automation, process improvements, and operational excellence initiatives.

Skills & Competencies

Essential

• Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 3+ years of experience managing endpoint security solutions across Windows, macOS, iOS, and Android.
• Hands-on experience with Microsoft Defender for Endpoint, Intune, Workspace ONE, Tanium, Cortex XDR/XSIAM, or similar technologies.
• Strong knowledge of endpoint security, compliance, hardening, encryption, patching, and vulnerability management.
• Experience with PowerShell and Microsoft Graph API.
• Working knowledge of CIS, NIST, and ISO 27001 frameworks.

Nice to Have

• Experience with Python, PowerShell, or Bash scripting.
• Knowledge of Microsoft 365 and Azure.
• Experience with ServiceNow integrations, DLP, Mobile Threat Defense, or Insider Risk solutions.
• Exposure to OT/industrial environments.
• Relevant certifications such as MD-102, SC-200, Tanium Certified Operator, or Palo Alto PCDRA.

Additional Skills

• Knowledge of ITIL/ITSM and Agile practices.
• Experience with Jira and Confluence.
• Strong communication, documentation, and stakeholder management skills.
• Analytical mindset with a focus on continuous improvement.
• Fluent written and spoken English.