Endpoint Protection Engineer

Richemont; Moscavide; On-site; EUR 50,000 - 70,000; Full time

Job summary

Richemont Iberia SL in Lisbon, Portugal is seeking an Endpoint Protection Engineer to design, implement, and manage endpoint security across corporate IT and OT environments. You will work with Security, Infra, and Workplace teams to strengthen protection, support cloud-native device management, and ensure compliance with security standards.

You will deploy and support Defender for Endpoint, Intune and Workspace ONE across Windows, macOS, iOS and Android, maintain baselines, patching,

Qualifications

• Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 3+ years of experience managing endpoint security solutions across Windows, macOS, iOS, and Android.
• Hands-on experience with Defender for Endpoint, Intune, Workspace ONE, Tanium, Cortex XDR/XSIAM, or similar technologies.
• Strong knowledge of endpoint security, compliance, hardening, encryption, patching, and vulnerability management.
• Experience with PowerShell and Microsoft Graph API.
• Working knowledge of CIS, NIST, and ISO 27001 frameworks.

Responsibilities

• Design, implement, and manage endpoint security solutions across IT and OT environments.
• Monitor endpoint security posture and investigate incidents.
• Collaborate with Security, IT, and OT teams to improve capabilities.
• Maintain security baselines, patching, encryption, and vulnerability remediation.
• Support audits and compliance with ISO 27001, NIST, and CIS.

Tools

Microsoft Defender for Endpoint

Intune

Workspace ONE

Tanium

Cortex XDR/XSIAM

PowerShell

Microsoft Graph API

Job description

Main Purpose

As an Endpoint Protection Engineer, you will design, implement, and manage endpoint security solutions across corporate IT and Operational Technology (OT) environments. Working closely with Security, Infrastructure, and Workplace teams, you will strengthen endpoint protection, support cloud-native device management, and ensure compliance with security standards and best practices.

Endpoint Security & Management

• Deploy, configure, and support endpoint security solutions, including EDR/XDR, Endpoint Protection, Mobile Threat Defense, DLP, and device compliance controls.
• Manage Windows, macOS, iOS, and Android endpoints using platforms such as Intune and Workspace ONE.
• Support cloud-native endpoint management and modern device provisioning.
• Maintain security baselines, patching, hardening, encryption, and vulnerability remediation.
• Integrate endpoint security platforms with enterprise services and automation tools.
  

Operations & Governance

• Monitor endpoint security posture and investigate security incidents.
• Perform threat exposure assessments and support remediation activities.
• Maintain endpoint standards, operational procedures, and compliance documentation.
• Support audits and compliance requirements aligned with ISO 27001, NIST, and CIS frameworks.
  

Collaboration & Continuous Improvement

• Collaborate with IT, Security, OT, and vendor teams to improve endpoint security capabilities.
• Provide technical guidance and share knowledge with colleagues and support teams.
• Contribute to automation, process improvements, and operational excellence initiatives.
  

Skills & Competencies

Essential

• Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 3+ years of experience managing endpoint security solutions across Windows, macOS, iOS, and Android.
• Hands‑on experience with Microsoft Defender for Endpoint, Intune, Workspace ONE, Tanium, Cortex XDR/XSIAM, or similar technologies.
• Strong knowledge of endpoint security, compliance, hardening, encryption, patching, and vulnerability management.
• Experience with PowerShell and Microsoft Graph API.
• Working knowledge of CIS, NIST, and ISO 27001 frameworks.
  

Nice to Have

• Experience with Python, PowerShell, or Bash scripting.
• Knowledge of Microsoft 365 and Azure.
• Experience with ServiceNow integrations, DLP, Mobile Threat Defense, or Insider Risk solutions.
• Exposure to OT/industrial environments.
• Relevant certifications such as MD-102, SC-200, Tanium Certified Operator, or Palo Alto PCDRA.
  

Additional Skills

• Knowledge of ITIL/ITSM and Agile practices.
• Experience with Jira and Confluence.
• Strong communication, documentation, and stakeholder management skills.
• Analytical mindset with a focus on continuous improvement.
• Fluent written and spoken English.