Endpoint Security Engineer

📋 Description

• Define and maintain security baselines for macOS and Windows (CIS or equivalent), delivered through
• Own hardening standards: disk encryption, firewall, local admin removal and privilege management
• Evaluate endpoint security tooling and steer vendors while keeping internal ownership of design
• Design and roll out application allowlisting using MDM-native capabilities and/or tools such as
• Build and maintain the software and binary inventory: discover, classify and risk-rate
• Run remediation campaigns for unauthorized or high-risk software, from communication to

🎯 Requirements

• 5+ years in endpoint security, security engineering, or end-user computing with a strong security
• Hands-on experience securing macOS and Windows at scale with Microsoft Intune and Jamf (or
• Practical experience with vulnerability management tooling, prioritization and remediation workflows
• Experience with application control and allowlisting (MDM-native controls, Santa, AppLocker, WDAC
• Strong knowledge of OS security and hardening frameworks (CIS, NIST, Apple platform security)
• Good understanding of Microsoft Entra ID, Conditional Access and Zero Trust applied to devices

🎁 Benefits

• Permanent Contract and a competitive compensation package
• Amazing centrally located offices near the Bernabeu Stadium
• Private Health Insurance (Sanitas) and daily meal vouchers of 11 EUR
• Hybrid work model balancing office and remote work
• Flexible Hours and unlimited vacation (employees have unlimited paid time off on top of the 23 days
• Up to 25 EUR per month for a gym subscription