Endpoint & SSE Security Engineer

Description

The role sits in the Spanish hub's security team, part of the global CISO department that runs IT security across the group and serves units worldwide.

The company is opening its sixth global hub, in Spain, to design and deliver technology and operations solutions. The wider network has over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.

Its services reach more than 34 million customers in over 38 countries. The company works in agile, cross-functional teams and aims for scalable, fast and secure technology.

Responsibilities

• Run and maintain the company's enterprise Secure Service Edge (SSE) platforms.
• Help roll out web security, DLP and internet access protection within the SSE ecosystem.
• Administer, maintain and troubleshoot SSE services day to day.
• Work with infrastructure, networking and security teams on solution implementation projects.
• Join an on-call support rotation and help with critical incident response.
• Write and update technical documentation and operating procedures.
• Find opportunities to automate tasks and keep improving the service.
• Keep the SSE environment stable and secure.

Requirements

• You have at least 3+ years managing proxy server environments.
• You have hands-on experience securing workstations and endpoint devices.
• You know DLP technologies, processes and controls.
• You have implemented and maintained web security and internet access control tools.
• You understand SWG, proxy, URL filtering and traffic inspection.
• You know endpoint security, including malware protection, device control and enforcing security policy.
• You have practical work with Microsoft Entra ID and identity security controls.
• You can troubleshoot network connectivity and security problems.
• You understand TCP/IP, DNS, HTTP/HTTPS and proxy architectures.
• You analyse problems well, spot risks and recommend mitigations.
• You communicate clearly with technical and business stakeholders.
• You are ready to join an on-call rotation.
• You focus on high-quality results and continuous improvement.
• Your English level is C1.
• Extra points for: enterprise DLP products such as Microsoft Purview, Symantec DLP or Forcepoint DLP.
• Extra points for: cloud security and SSE or SASE platforms.
• Extra points for: Microsoft Defender for Endpoint and Microsoft Purview.
• Extra points for: Zero Trust security principles.
• Extra points for: security monitoring and incident response processes.
• Extra points for: CASB technologies.
• Extra points for: automating operational tasks and reporting.
• Extra points for: relevant security certifications.

Conditions

You and the team agree which days you work from home and which you spend at the Madrid office.

You take part in an on-call rotation.

The company values diversity, inclusion and belonging and welcomes applicants from all backgrounds.

Benefits

• Restaurant card to cover your lunches.
• Health insurance covering you plus your spouse or partner and children.
• Life insurance.
• Flexible pay package offering tax-advantaged access to services such as nursery, a transport card and training aids.
• Transport allowance to help you reach the office, wherever you live.
• Pension plan you can join after 1 month with the company.
• Office amenities including electric mobility options, a doctor, a hairdresser, a gym and The Good Service for errands.