Endpoint Security & PAM Specialist

atCasas Bahia TecnologiaRemoteAnywhere in the World Full-time Cybersecurity / Security EngineerMid-levelSenior

Posted Jul 3

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Oversee security measures for Windows, macOS, and mobile devices, ensuring compliance with corporate security protocols;

• Maintain ongoing visibility and monitoring of the endpoint environment (critical vulnerabilities and exposure);

• Manage, enhance, and administer the MDM environment (Microsoft Intune): implement compliance and configuration policies, oversee corporate devices and BYOD, enforce endpoint hardening, manage corporate applications and security profiles, and automate configurations and remediation processes;

• Administer and optimize solutions such as Microsoft Defender for Endpoint and CrowdStrike Falcon for threat detection and response; analyze and address alerts, minimize false positives, integrate with SIEM and SOC platforms, and support Threat Hunting activities;

• Define and execute patch management procedures;

• Ensure operating systems and applications are regularly updated to continuously enhance security posture;

• Minimize the risk exposure of corporate assets;

• Implement security standards based on CIS Benchmarks, ensuring adherence to corporate policies and regulatory obligations;

• Administer and enhance Privileged Access Management (PAM) solutions;

• Monitor privileged access, conduct periodic privilege reviews, and enforce segregation of duties;

• Create operational and executive dashboards utilizing Power BI, Microsoft Sentinel, Azure Monitor, EDR/XDR consoles, and PAM tools;

• Develop automation scripts using PowerShell and Python; automate onboarding and offboarding processes, access reviews, and credential rotations;

• Integrate EDR, SIEM, MDM, and PAM solutions;

• Respond to incidents involving endpoints and compromised credentials: conduct triage and basic forensic analysis, investigate misuse of privileged accounts, isolate compromised devices, and undertake containment, remediation, and recovery actions;

• Collaborate with SOC, IAM, Infrastructure, Cloud, and GRC teams;

• Support internal and external audits;

• Contribute to Zero Trust and Least Privilege initiatives;

• Assist in identity and access management projects;

• Educate users and technical teams on endpoint security and advocate for best practices in credential protection;

• Stay informed on trends, threats, and emerging security technologies; participate in relevant training and certifications;

• Contribute to the ongoing advancement of Endpoint Security and PAM maturity;

⛳️ Requirements

• Bachelor's degree in Computer Science, Engineering, Information Systems, or related fields;

• Demonstrated experience in Endpoint Security;

• Familiarity with Microsoft Intune;

• Experience with Microsoft Defender for Endpoint and/or CrowdStrike Falcon;

• Knowledge of PAM solutions and enterprise password vaults;

• Experience in vulnerability management and patch management;

• Familiarity with audits and privileged access controls;

• Certifications such as Microsoft Certified: Endpoint Administrator Associate; Security Operations Analyst (SC-200); Identity and Access Administrator (SC-300); Delinea Specialist; and CompTIA Security+;

• Experience or background in retail;