Engineer Endpoint Security (Poznań - hybrid) w Poznań, Polska

Required Qualifications

• Three or more years in information technology, including at least one year working directly with endpoint security or systems management tooling .
• Practical administration experience with an endpoint detection and response or anti-malware console, and with an enterprise software deployment tool such as Intune or SCCM.
• Sound knowledge of Windows administration, with working familiarity with macOS or Linux endpoints.
• Scripting ability in PowerShell, Bash, or Python sufficient to automate routine tasks and parse platform output.
• Fluency in English and Polish.

Preferred Qualifications

• Security certification such as CompTIA Security+, Microsoft SC-200, or a vendor endpoint certification.
• Exposure to security operations center workflows, ticketing platforms, and change management in a regulated environment.

This is a hybrid role and regular visits to Poznań are required

Please note that CV in English is required.

Role Purpose

The Engineer for Endpoint Security keeps the endpoint protection estate healthy and current. The role handles agent deployment and remediation, executes policy changes designed with the senior engineers, and resolves the day-to-day exceptions raised by service desk and operations teams. It suits an engineer who has a solid grounding in endpoint administration and wants to develop into a specialist security engineering career.

Working Arrangements and Team Expectations

This role sits within the Information Security Platform Engineering function and shares a common operating model with the wider team. Engineers own the security platforms they build end to end: design, deployment, day-to-day operation, tuning, and lifecycle management. Work is delivered against agreed service levels and measured on control coverage, platform availability, and the quality of detection and prevention outcomes. Because the teams are distributed across LATAM, EMEA, and North America, all roles require reliable overlap with United States business hours and fluent written and spoken English.

• Operate assigned security platforms as a service, including capacity planning, patching, upgrades, health monitoring, and vendor case management.
• Automate repetitive configuration and operational tasks, and treat platform configuration as code wherever the tooling supports it.
• Support incident response and forensic investigations with platform expertise , evidence, and rapid containment actions.
• Maintain runbooks, architecture diagrams, and control documentation to a standard that satisfies internal audit and external assessment.
• Participate in an on-call rotation and in scheduled change windows, including occasional work outside standard business hours.

What we offer:

• Hybrid working model (2 days in the office and 3 days working remotely )
• Stable employment with an employment contract , private medical care , and a benefits package including MultiSport and a benefits platform
• Opportunity to work in an international environment and collaborate with experienced Grant Thornton experts and professionals from around the world
• A culture based on teamwork , trust, and knowledge sharing
• A well-structured onboarding program to support a smooth start and successful integration into your new role
• Clear career development paths and access to learning and certification programs
• Access to training platforms and tools that support professional growth
• An inclusive workplace that welcomes people with disabilities
• A modern office in Poznań, located in Malta Office Park
• Fluency in Polish and English

Why join Grant Thornton Global Delivery Center Poland

At Grant Thornton Global Delivery Center Poland (GDC), you’ll contribute to meaningful work that moves businesses forward. From day one, you’ll help deliver value for clients while helping shape the future of a growing delivery center in Poland.

Through supporting operations of our growing multinational platform, you’ll have opportunities to tackle complex projects, work with advanced technologies and develop new skills while expanding your experience. You’ll collaborate across countries, markets and time zones, learning from different perspectives and building experience beyond their roles.

At GDC Poland, you’ll be part of a team that succeeds together. Knowledge is shared, diverse perspectives are valued, and team members support one another in doing their best work.

Clear career paths, learning opportunities and international exposure will help you continue building your skills, expanding your capabilities and growing a rewarding career.

About Grant Thornton

Grant Thornton provides audit and assurance, tax and advisory services through the member firms of the Grant Thornton International Ltd (GTIL) network. Wherever business operates, the network is there, with member firm capabilities in more than 150 markets worldwide.

Within the network, the Grant Thornton Advisors multinational platform is a group of firms that connects priority markets and operates with aligned standards, technology and delivery expectations. For work that crosses borders, this helps support collaboration and coordination across markets. Platform firms operate as separate legal entities.

Why choose a career with Grant Thornton

At Grant Thornton, we help ambitious organizations make their most important decisions across audit, tax and advisory. Our scale doesn’t create distance. You work in smaller teams, with senior people who stay involved from start to finish. You take on real work early, help shape it and see it through.

You get access to capabilities across disciplines, clients in almost every industry and colleagues around the world who are only a message away.

Build a career with meaningful work, multinational opportunities and the support to make a lasting impact.

Join our team!

We are searching for IT professionals across multiple specialties and experience levels. Click on the arrow to see current job offers.

,[Deploy, upgrade, and troubleshoot endpoint security agents across workstations and servers, and drive agent coverage and health metrics to target., Implement approved policy, exclusion, and device control changes through the standard change process, with testing evidence and rollback plans., Triage endpoint alerts and platform tickets, resolving routine issues directly and escalating complex detections with a clear technical summary., Reconcile endpoint coverage against the asset inventory, investigate unprotected and stale hosts, and report gaps to the platform owner., Maintain runbooks and knowledge base articles for recurring endpoint issues, and contribute scripts that reduce manual handling.] Requirements: Endpoint Detection and Response, Intune, Windows, macOS, Linux, PowerShell, Bash, Python, CompTIA Security+, Microsoft SC-200 Additionally: Sport subscription, Private healthcare, Training budget, Free coffee, Bike parking, Mobile phone, In-house trainings, Modern office.