IT Client Security Engineer

apeirum partners with European companies to place senior IT talent. For one of our client partners in Barcelona we're hiring an IT Client Security Engineer to secure and harden their Windows endpoint estate — Microsoft Intune, Defender for Endpoint, and Microsoft 365 E5 security. Barcelona-based, permanent, with regular travel (10–20%). Design, implement and operate client security solutions for Windows endpoints. Build and continuously improve security baselines, hardening standards and compliance policies. Operate, configure and optimise Microsoft Defender for Endpoint, Defender Antivirus, Firewall and ASR rules. Leverage Microsoft 365 E5 security — Conditional Access, Endpoint Security, Identity Protection. Analyse, investigate and remediate endpoint security incidents. Create and maintain technical concepts, documentation and operational procedures. Must have: Strong expertise in Microsoft Windows 10/11, Intune / Endpoint Manager, Defender for Endpoint, and Microsoft 365 E5 Security & Compliance. Endpoint hardening (Microsoft Security Baselines, CIS benchmarks). PowerShell scripting and automation. Several years in endpoint management / client security; strong analytical, security-focused mindset. Very good English. Based in Spain (Barcelona). Degree in computer science. Nice to have: Azure AD / Microsoft Entra ID. Own a real client-security mandate in a modern Microsoft environment. Permanent, full-time, Barcelona-based. International environment. Interested? Apply with your CV. We review every application personally and we'll get back to you.