Endpoint & Workplace Security Engineer

Do you want to own how a bank secures the way its people work?

At Avarda you get the mandate to design, enforce and improve the security of our laptops, mobile devices and Microsoft 365 identities. You will work hands-on with Intune, Defender, Entra ID and Sentinel, across Windows, macOS, iOS and Android, in a regulated environment with high demands on security and compliance.

You will join the Workplace team in IT Operations, together with the IT Helpdesk, and work side by side with the rest of the operations team, our Security Engineer for infrastructure and our SOC partner. You will be the person who sets the security baseline for the workplace and the go-to person when security and workplace questions meet.

Avarda is an internet-based niche bank offering consumer banking and e-commerce solutions through our own highly automated IT platform. Our business spans Consumer Lending, E-commerce Solutions and Credit Cards, and we serve private individuals in 14 countries: Sweden, Finland, Norway, Denmark, Estonia, Latvia, Lithuania, Poland, Germany, Austria, Ireland, the Netherlands, Italy and Spain. We are growing fast, and so is the scope and complexity of what we need to protect.

• Endpoint security. Intune configuration profiles, compliance policies and security baselines, and device deployment with Windows Autopilot, across Windows, macOS, iOS and Android, including mobile device and app management.
• Microsoft 365 security. Entra ID, Conditional Access and Defender for Endpoint and Office 365, together with security settings in Exchange Online, SharePoint and Teams.
• Threat detection and response. Detection, investigation and response on clients together with our SOC partner, using Microsoft Defender and Sentinel.
• Data protection. DLP and information protection, including security evaluation of new AI tools before they reach our users.
• Vulnerability management. Vulnerability scanning and follow-up of penetration test findings for the workplace environment, driven through to resolution.
• Support and escalation. 2nd line escalation point for the IT Helpdesk on security and workplace issues, and a trusted contact for other teams with IT Operations questions.

You enjoy solving problems hands-on and take ownership of your area. You are comfortable in a 2nd line support role and see every support case as a chance to make the environment a little more secure.

• Hands-on experience administering and securing endpoints with Microsoft Intune, including Windows Autopilot
• Working knowledge of Microsoft Defender, Entra ID and Conditional Access
• Experience from IT Operations or 2nd line support, helping end users and other IT teams
• A structured, analytical approach to problem-solving
• Strong communication skills, and the ability to explain technical topics to non-technical colleagues
• Fluency in English. Swedish is a plus
• Experience with macOS and mobile device management (iOS, Android)
• Experience with Microsoft Sentinel and Microsoft Purview (DLP, sensitivity labels)
• PowerShell or other scripting for automation
• Experience from a regulated environment, such as financial services
• Microsoft certifications such as MD-102, SC-200 or SC-300, or equivalent experience

Do not worry if you do not check every box. If you are curious, driven and eager to grow into the role, we would still love to hear from you.

Worth knowing

This is a full-time, permanent position based in Málaga or Szczecin. Hybrid work flexibility is available. You will report into IT Operations and work in close proximity to the IT Helpdesk and the rest of the operations team, which gives you fast escalation paths and strong support from day one.

We believe diverse teams build better solutions, and we welcome applicants from all backgrounds.

Ready to apply?

If you have any questions about the role, feel free to reach out to our hiring manager, Robert Lööf, Head of IT Operations. We look forward to hearing from you!

Supporting the security of our server and cloud environment, Group Policy and privileged access (PIM/PAM), as well as documentation, security policies, audits, and our Disaster Recovery and Business Continuity work.

You will have plenty of opportunity to shape how we do things. If you see a smarter or safer way to work, we want to hear it.

Your future team

You will be part of the Workplace team, which runs our workplace environment and IT Helpdesk as a part of IT Operations. You will work daily with the Helpdesk and with the rest of the operations team, who own our global infrastructure and services. Together with the Security Engineer working with infrastructure, you form the core of our security engineering: you own the workplace side, they own the infrastructure side. You will also work with our SOC provider and external security partners. It is a hands-on, collaborative environment where knowledge-sharing makes everyone better.