IT Client Security Engineer

apeirum partners with European companies to place senior IT talent. For one of our client partners in Barcelona we're hiring an IT Client Security Engineer to secure and harden their Windows endpoint estate — Microsoft Intune, Defender for Endpoint, and Microsoft 365 E5 security. Barcelona-based, permanent, with regular travel (10–20%).

Tasks you will perform

• Design, implement and operate client security solutions for Windows endpoints.
• Build and continuously improve security baselines, hardening standards and compliance policies.
• Operate, configure and optimise Microsoft Defender for Endpoint, Defender Antivirus, Firewall and ASR rules.
• Leverage Microsoft 365 E5 security — Conditional Access, Endpoint Security, Identity Protection.
• Analyse, investigate and remediate endpoint security incidents.
• Create and maintain technical concepts, documentation and operational procedures.
• Own and operate endpoint vulnerability management (identify, monitor, prioritise and remediate vulnerabilities).
• Ensure continuous monitoring and timely remediation of endpoint security weaknesses.
• Work closely with the CISO to align endpoint security with enterprise risk and compliance requirements.

Our Requirements

Must have:

• Strong expertise in Microsoft Windows 10/11, Intune / Endpoint Manager, Defender for Endpoint, and Microsoft 365 E5 Security & Compliance.
• Endpoint hardening (Microsoft Security Baselines, CIS benchmarks).
• PowerShell scripting and automation.
• Several years in endpoint management / client security; strong analytical, security-focused mindset.
• Very good English.
• Based in Spain (Barcelona).
• Degree in computer science.

Nice to have:

• Azure AD / Microsoft Entra ID.

Your Benefits

• Own a real client-security mandate in a modern Microsoft environment.
• A dynamic and friendly workplace in a tech hub in Barcelona, combining startup energy with the stability of a Swiss industrial leader.
• International collaboration with global teams, especially in Switzerland, and external integration partners.
• Opportunities for continuous learning and growth through the internal academy and professional development programs.
• A permanent contract, competitive compensation, and flexible working hours supporting work–life balance.

Interested? Apply with your CV. We review every application personally and we'll get back to you.