Design, implement and operate client security solutions for Windows endpoints.
Build and continuously improve security baselines, hardening standards and compliance policies.
Operate, configure and optimise Microsoft Defender for Endpoint, Defender Antivirus, Firewall and ASR rules.
Leverage Microsoft 365 E5 security — Conditional Access, Endpoint Security, Identity Protection.
Analyse, investigate and remediate endpoint security incidents.
Create and maintain technical concepts, documentation and operational procedures.
Own and operate endpoint vulnerability management (identify, monitor, prioritise and remediate vulnerabilities).
Ensure continuous monitoring and timely remediation of endpoint security weaknesses.
Work closely with the CISO to align endpoint security with enterprise risk and compliance requirements.

Strong expertise in Microsoft Windows 10/11, Intune / Endpoint Manager, Defender for Endpoint, and Microsoft 365 E5 Security & Compliance.
Endpoint hardening (Microsoft Security Baselines, CIS benchmarks).
PowerShell scripting and automation.
Several years in endpoint management / client security; strong analytical, security-focused mindset.
Very good English.
Based in Spain (Barcelona).
Degree in computer science.

Own a real client-security mandate in a modern Microsoft environment.
A dynamic and friendly workplace in a tech hub in Barcelona, combining startup energy with the stability of a Swiss industrial leader.
International collaboration with global teams, especially in Switzerland, and external integration partners.
Opportunities for continuous learning and growth through the internal academy and professional development programs.
A permanent contract, competitive compensation, and flexible working hours supporting work–life balance.

On-site — Barcelona

apeirum is hiring an IT Client Security Engineer