Endpoint Security & PAM Specialist

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Oversee security measures for Windows, macOS, and mobile devices, ensuring compliance with corporate security protocols;

• Maintain ongoing visibility and monitoring of the endpoint environment (critical vulnerabilities and exposure);

• Manage, enhance, and administer the MDM environment (Microsoft Intune): implement compliance and configuration policies, oversee corporate devices and BYOD, enforce endpoint hardening, manage corporate applications and security profiles, and automate configurations and remediation processes;

• Administer and optimize solutions such as Microsoft Defender for Endpoint and CrowdStrike Falcon for threat detection and response; analyze and address alerts, minimize false positives, integrate with SIEM and SOC platforms, and support Threat Hunting activities;

• Define and execute patch management procedures;

• Ensure operating systems and applications are regularly updated to continuously enhance security posture;

• Minimize the risk exposure of corporate assets;

• Implement security standards based on CIS Benchmarks, ensuring adherence to corporate policies and regulatory obligations;

• Administer and enhance Privileged Access Management (PAM) solutions;

• Monitor privileged access, conduct periodic privilege reviews, and enforce segregation of duties;

• Create operational and executive dashboards utilizing Power BI, Microsoft Sentinel, Azure Monitor, EDR/XDR consoles, and PAM tools;

• Develop automation scripts using PowerShell and Python; automate onboarding and offboarding processes, access reviews, and credential rotations;

• Integrate EDR, SIEM, MDM, and PAM solutions;

• Respond to incidents involving endpoints and compromised credentials: conduct triage and basic forensic analysis, investigate misuse of privileged accounts, isolate compromised devices, and undertake containment, remediation, and recovery actions;

• Collaborate with SOC, IAM, Infrastructure, Cloud, and GRC teams;

• Support internal and external audits;

• Contribute to Zero Trust and Least Privilege initiatives;

• Assist in identity and access management projects;

• Educate users and technical teams on endpoint security and advocate for best practices in credential protection;

• Stay informed on trends, threats, and emerging security technologies; participate in relevant training and certifications;

• Contribute to the ongoing advancement of Endpoint Security and PAM maturity;

⛳️ Requirements

• Bachelor's degree in Computer Science, Engineering, Information Systems, or related fields;

• Demonstrated experience in Endpoint Security;

• Familiarity with Microsoft Intune;

• Experience with Microsoft Defender for Endpoint and/or CrowdStrike Falcon;

• Knowledge of PAM solutions and enterprise password vaults;

• Experience in vulnerability management and patch management;

• Familiarity with audits and privileged access controls;

• Certifications such as Microsoft Certified: Endpoint Administrator Associate; Security Operations Analyst (SC-200); Identity and Access Administrator (SC-300); Delinea Specialist; and CompTIA Security+;

• Experience or background in retail;

🏝️ Benefits

• Profit sharing / Bonus: An additional recognition to value your effort and dedication!

• Medical and Dental Care: Health coverage for you and your family.

• Meal Allowance: Because quality meals are essential to your day-to-day!

• Life Insurance: Peace of mind and protection for you and your loved ones.

• Extended Maternity Leave: 180 days for our mothers to enjoy the early months with their baby!

• Extended Paternity Leave: 20 days so fathers can also be present during the first days of life.

• Physical Activity Incentive: Access Wellhub (Gympass) and Total Pass to stay active and healthy.

• Commuting Allowance: To ensure your travel to work is smooth and worry-free.

• Partnership with SESC: Enjoy benefits in culture, leisure, health, and more!

• Discount Club: Access discounts of up to 70% on products and services with over 2,000 partners across Brazil and Latin America!

• Birthday Day-off: Celebrate your day with a paid day off on your birthday!

• Pharmacy Discounts: Exclusive discounts on medications to help you save on healthcare!