Engineer Endpoint Security
Required Qualifications
- Three or more years in information technology, including at least one year working directly with endpoint security or systems management tooling.
- Practical administration experience with an endpoint detection and response or anti-malware console, and with an enterprise software deployment tool such as Intune or SCCM.
- Sound knowledge of Windows administration, with working familiarity with macOS or Linux endpoints.
- Scripting ability in PowerShell, Bash, or Python sufficient to automate routine tasks and parse platform output.
- Fluency in English and Polish.
Preferred Qualifications
- Security certification such as CompTIA Security+, Microsoft SC-200, or a vendor endpoint certification.
- Exposure to security operations center workflows, ticketing platforms, and change management in a regulated environment.
Role Purpose
The Engineer for Endpoint Security keeps the endpoint protection estate healthy and current. The role handles agent deployment and remediation, executes policy changes designed with the senior engineers, and resolves the day-to-day exceptions raised by service desk and operations teams. It suits an engineer who has a solid grounding in endpoint administration and wants to develop into a specialist security engineering career.
Working Arrangements and Team Expectations
This role sits within the Information Security Platform Engineering function and shares a common operating model with the wider team. Engineers own the security platforms they build end to end: design, deployment, day-to-day operation, tuning, and lifecycle management. Work is delivered against agreed service levels and measured on control coverage, platform availability, and the quality of detection and prevention outcomes. Because the teams are distributed across LATAM, EMEA, and North America, all roles require reliable overlap with United States business hours and fluent written and spoken English.
- Operate assigned security platforms as a service, including capacity planning, patching, upgrades, health monitoring, and vendor case management.
- Automate repetitive configuration and operational tasks, and treat platform configuration as code wherever the tooling supports it.
- Support incident response and forensic investigations with platform expertise, evidence, and rapid containment actions.
- Maintain runbooks, architecture diagrams, and control documentation to a standard that satisfies internal audit and external assessment.
- Participate in an on-call rotation and in scheduled change windows, including occasional work outside standard business hours.
What we offer:
- Hybrid working model (2 days in the office and 3 days working remotely)
- Stable employment with an employment contract, private medical care, and a benefits package including MultiSport and a benefits platform
- Opportunity to work in an international environment and collaborate with experienced Grant Thornton experts and professionals from around the world
- A culture based on teamwork, trust, and knowledge sharing
- A well-structured onboarding program to support a smooth start and successful integration into your new role
- Clear career development paths and access to learning and certification programs
- Access to training platforms and tools that support professional growth
- An inclusive workplace that welcomes people with disabilities
- A modern office in Poznań, located in Malta Office Park
- Fluency in Polish and English
Why join Grant Thornton Capability Center Poland?
At Grant Thornton Capability Center Poland (GTCC), employees contribute to meaningful work that moves businesses forward. From day one, team members help deliver value for clients while helping shape the future of a growing delivery center in Poland.
Through supporting operations of our growing multinational platform, employees have opportunities to tackle complex projects, work with advanced technologies and develop the skills needed for what's next. Team members collaborate across countries, markets and time zones, learning from different perspectives and building experience beyond their roles.
At GTCC Poland, teammates succeed together. Knowledge is shared, diverse perspectives are valued, and employees support one another in doing their best work.
Clear career paths, learning opportunities and international exposure help employees continue building skills, expanding capabilities and growing rewarding careers.
About Global Delivery Centers (enterprise description)
Grant Thornton Capability Center (GTCC) support the operations of the Grant Thornton Advisors multinational platform.
We bring together people, technology and delivery capabilities that help teams work across markets and time zones. By supporting shared standards, technology and delivery expectations GTCC help keep work moving, connect teams across the platform and create consistency across the way work is delivered.
We are part of a multinational platform that brings together more than 25,000 professionals across 20+ firms. As organizations grow, enter new markets and face increasing complexity, our centers help provide the scale, coordination and operational support needed to keep work moving forward.
For our people, that means working with colleagues across markets, contributing to work with international reach and helping teams deliver consistently in an environment built on collaboration, accountability and quality.