Endpoint Security Engineer: Protect & Manage Devices

Richemont; Moscavide; On-site; EUR 50,000 - 70,000; Full time

Job summary

Richemont Iberia SL in Lisbon, Portugal is seeking an Endpoint Protection Engineer to design, implement, and manage endpoint security across corporate IT and OT environments. You will work with Security, Infra, and Workplace teams to strengthen protection, support cloud-native device management, and ensure compliance with security standards.

You will deploy and support Defender for Endpoint, Intune and Workspace ONE across Windows, macOS, iOS and Android, maintain baselines, patching,

Qualifications

• Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 3+ years of experience managing endpoint security solutions across Windows, macOS, iOS, and Android.
• Hands-on experience with Defender for Endpoint, Intune, Workspace ONE, Tanium, Cortex XDR/XSIAM, or similar technologies.
• Strong knowledge of endpoint security, compliance, hardening, encryption, patching, and vulnerability management.
• Experience with PowerShell and Microsoft Graph API.
• Working knowledge of CIS, NIST, and ISO 27001 frameworks.

Responsibilities

• Design, implement, and manage endpoint security solutions across IT and OT environments.
• Monitor endpoint security posture and investigate incidents.
• Collaborate with Security, IT, and OT teams to improve capabilities.
• Maintain security baselines, patching, encryption, and vulnerability remediation.
• Support audits and compliance with ISO 27001, NIST, and CIS.

Tools

Microsoft Defender for Endpoint

Intune

Workspace ONE

Tanium

Cortex XDR/XSIAM

PowerShell

Microsoft Graph API

Job description

Richemont Iberia SL in Lisbon, Portugal is seeking an Endpoint Protection Engineer to design, implement, and manage endpoint security across corporate IT and OT environments. You will work with Security, Infra, and Workplace teams to strengthen protection, support cloud-native device management, and ensure compliance with security standards.

You will deploy and support Defender for Endpoint, Intune and Workspace ONE across Windows, macOS, iOS and Android, maintain baselines, patching,