Endpoint Security Engineer (Intune/Jamf)

Location: Madrid, Spain; hybrid work model balancing office and remote work.

Company

hirify.global provides digital employee experience management software that gives IT leaders visibility, diagnostics, automation, and remediation across enterprise endpoints.

What you will do

• Define and maintain CIS-aligned security baselines for macOS and Windows through Microsoft Intune and Jamf.
• Design application allowlisting, software inventory, risk classification, remediation campaigns, and the complete application lifecycle process.
• Own endpoint vulnerability and patch management, including prioritization, update rings, SLA tracking, and zero-day remediation.
• Partner with IAM and Security on device compliance, Conditional Access, Zero Trust, data protection, and hardware-backed authentication.
• Document endpoint controls and automate evidence and reporting for ISO 27001, SOC 2, and ITGC audits.
• Automate security operations with PowerShell, Python, shell scripting, Microsoft Graph, Jamf APIs, and Intune APIs while measuring employee impact through the hirify.global DEX platform.

Requirements

• 5+ years of experience in endpoint security, security engineering, or end-user computing with a strong security focus.
• Hands-on experience securing macOS and Windows at scale with Microsoft Intune and Jamf or equivalent tools.
• Experience with vulnerability management, application control, allowlisting, OS hardening, and remediation workflows.
• Knowledge of Entra ID, Conditional Access, Zero Trust, CIS, NIST, and Apple platform security.
• Scripting skills in PowerShell, Python, or Bash, with familiarity with REST APIs and Microsoft Graph.
• Fluent English required; Spanish is a plus. Ability to collaborate with Engineering and Product teams and communicate with senior stakeholders.

Nice to have

• Experience with DEX tools, Microsoft Purview, or certifications such as MD-102, SC-300, Jamf Certified, GIAC, CISSP, or Security+.

Culture & Benefits

• Permanent employment with a competitive compensation package.
• Private health insurance, daily meal vouchers, and flexible compensation for childcare and public transportation.
• Flexible hours, unlimited paid time off in addition to 23 holiday days, and three company-paid volunteer days.
• Gym subscription support and reimbursement of English and Spanish classes.
• Centrally located Madrid office near the Bernabeu Stadium, with regular company and team events.