Endpoint & Workplace Security Engineer

Do you want to own how a bank secures the way its people work

At Avarda you get the mandate to design enforce and improve the security of our laptops mobile devices and Microsoft 365 identities. You will work hands-on with Intune Defender Entra ID and Sentinel across Windows macOS iOS and Android in a regulated environment with high demands on security and compliance.

You will join the Workplace team in IT Operations together with the IT Helpdesk and work side by side with the rest of the operations team our Security Engineer for infrastructure and our SOC partner. You will be the person who sets the security baseline for the workplace and the go-to person when security and workplace questions meet.

Avarda is an internet-based niche bank offering consumer banking and e-commerce solutions through our own highly automated IT platform. Our business spans Consumer Lending E-commerce Solutions and Credit Cards and we serve private individuals in 14 countries: Sweden Finland Norway Denmark Estonia Latvia Lithuania Poland Germany Austria Ireland the Netherlands Italy and Spain. We are growing fast and so is the scope and complexity of what we need to protect.

• Endpoint security. Intune configuration profiles compliance policies and security baselines and device deployment with Windows Autopilot across Windows macOS iOS and Android including mobile device and app management.

• Microsoft 365 security. Entra ID Conditional Access and Defender for Endpoint and Office 365 together with security settings in Exchange Online SharePoint and Teams.

• Threat detection and response. Detection investigation and response on clients together with our SOC partner using Microsoft Defender and Sentinel.

• Data protection. DLP and information protection including security evaluation of new AI tools before they reach our users.

• Vulnerability management. Vulnerability scanning and follow-up of penetration test findings for the workplace environment driven through to resolution.

• Support and escalation. 2nd line escalation point for the IT Helpdesk on security and workplace issues and a trusted contact for other teams with IT Operations questions.

Supporting the security of our server and cloud environment Group Policy and privileged access (PIM/PAM) as well as documentation security policies audits and our Disaster Recovery and Business Continuity work.

You will have plenty of opportunity to shape how we do things. If you see a smarter or safer way to work we want to hear it.

You will be part of the Workplace team which runs our workplace environment and IT Helpdesk as a part of IT Operations. You will work daily with the Helpdesk and with the rest of the operations team who own our global infrastructure and services. Together with the Security Engineer working with infrastructure you form the core of our security engineering: you own the workplace side they own the infrastructure side. You will also work with our SOC provider and external security partners. It is a hands-on collaborative environment where knowledge-sharing makes everyone better.

You enjoy solving problems hands-on and take ownership of your area. You are comfortable in a 2nd line support role and see every support case as a chance to make the environment a little more secure.

• Hands-on experience administering and securing endpoints with Microsoft Intune including Windows Autopilot

• Working knowledge of Microsoft Defender Entra ID and Conditional Access

• Experience from IT Operations or 2nd line support helping end users and other IT teams

• A structured analytical approach to problem-solving

• Strong communication skills and the ability to explain technical topics to non-technical colleagues

• Fluency in English. Swedish is a plus

• Experience with macOS and mobile device management (iOS Android)

• Experience with Microsoft Sentinel and Microsoft Purview (DLP sensitivity labels)

• PowerShell or other scripting for automation

• Experience from a regulated environment such as financial services

• Microsoft certifications such as MD-102 SC-200 or SC-300 or equivalent experience

Do not worry if you do not check every box. If you are curious driven and eager to grow into the role we would still love to hear from you.

This is a full-time permanent position based in Málaga or Szczecin. Hybrid work flexibility is available. You will report into IT Operations and work in close proximity to the IT Helpdesk and the rest of the operations team which gives you fast escalation paths and strong support from day one.

We believe diverse teams build better solutions and we welcome applicants from all backgrounds.

If you have any questions about the role feel free to reach out to our hiring manager Robert Lööf Head of IT Operations. We look forward to hearing from you!