Job Description

We are looking for an Endpoint Security Engineer to own the security of Nexthink’s corporate endpoint estate: roughly 1,200 devices (550 macOS, 650 Windows) managed through Microsoft Intune and Jamf. You will turn endpoint security from a set of point controls into a measurable, continuously improving program covering what runs on our devices, how quickly we patch them, and how we prove it to auditors.
This is a hands-on role at a pivotal moment, as we build out a dedicated security function. Your first priorities include application baselines and allowlisting, a formal application lifecycle from approval to removal, and stronger vulnerability and compliance posture across both platforms. As a company that sells digital employee experience, we expect security that protects people without getting in their way.
Key Responsibilities
Endpoint Hardening
- Define and maintain security baselines for macOS and Windows (CIS or equivalent), delivered through Intune and Jamf.
- Own hardening standards: disk encryption, firewall, local admin removal and privilege management.




- Evaluate endpoint security tooling and steer vendors while keeping internal ownership of design.

Application Control & Software Governance
- Design and roll out application allowlisting using MDM-native capabilities and/or tools such as Santa, with developer-friendly exception models for Engineering and Product.
- Build and maintain the software and binary inventory: discover, classify and risk-rate applications, and define baselines from the results.
- Run remediation campaigns for unauthorized or high-risk software, from communication to uninstallation and verification.
- Operate the application lifecycle process end to end: request, security review, deployment, monitoring and retirement.

Vulnerability & Patch Management
- Own endpoint vulnerability management: scanning, risk-based prioritization and remediation tracking against SLAs.
- Define patching and update rings for OS and thir

📌 Endpoint Security Engineer (Madrid)
🏢 Nexthink
📍 Madrid