Endpoint & Workplace Security Engineer

Avarda Bank AB (publ); Szczecin; Hybrid; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work flexibility

Job summary

Avarda is seeking a security-oriented specialist to own endpoint and Microsoft 365 security within a hybrid IT Operations team. You will work hands-on across Windows, macOS, iOS and Android, setting security baselines and responding to threats in collaboration with SOC partners.

You will contribute to server and cloud security, policy documentation and DR/BC work, with strong emphasis on hands-on execution and cross-team cooperation.

Qualifications

• Hands-on experience securing endpoints with Intune.
• Knowledge of Defender for Endpoint and Entra ID.
• Experience in IT Operations or 2nd line support.
• Structured, analytical problem-solving.
• Excellent communication and ability to explain tech to non-tech.
• Fluent English; Swedish is a plus.

Responsibilities

• Endpoint security across devices with Intune and Autopilot.
• Microsoft 365 security including Entra ID and Defender.
• Threat detection and response with Defender and Sentinel.
• Data protection and DLP, evaluate AI tools before use.
• Vulnerability management from scans to remediation.
• 2nd line escalation for IT Helpdesk.
• Support server and cloud security, GPO and privileged access, plus DR/BC docs.

Skills

Intune admin

Defender

Entra ID

Security operations

2nd line support

Tools

Microsoft Sentinel

PowerShell

Job description

Do you want to own how a bank secures the way its people work?

At Avarda you get the mandate to design, enforce and improve the security of our laptops, mobile devices and Microsoft 365 identities. You will work hands‑on with Intune, Defender, Entra ID and Sentinel, across Windows, macOS, iOS and Android, in a regulated environment with high demands on security and compliance.

You will join the Workplace team in IT Operations, together with the IT Helpdesk, and work side by side with the rest of the operations team, our Security Engineer for infrastructure and our SOC partner. You will be the person who sets the security baseline for the workplace and the go‑to person when security and workplace questions meet.

About Avarda

Avarda is an internet‑based niche bank offering consumer banking and e‑commerce solutions through our own highly automated IT platform. Our business spans Consumer Lending, E‑commerce Solutions and Credit Cards, and we serve private individuals in 14 countries: Sweden, Finland, Norway, Denmark, Estonia, Latvia, Lithuania, Poland, Germany, Austria, Ireland, the Netherlands, Italy and Spain. We are growing fast, and so is the scope and complexity of what we need to protect.

What you will own

• Endpoint security. Intune configuration profiles, compliance policies and security baselines, and device deployment with Windows Autopilot, across Windows, macOS, iOS and Android, including mobile device and app management.
• Microsoft 365 security. Entra ID, Conditional Access and Defender for Endpoint and Office 365, together with security settings in Exchange Online, SharePoint and Teams.
• Threat detection and response. Detection, investigation and response on clients together with our SOC partner, using Microsoft Defender and Sentinel.
• Data protection. DLP and information protection, including security evaluation of new AI tools before they reach our users.
• Vulnerability management. Vulnerability scanning and follow‑up of penetration test findings for the workplace environment, driven through to resolution.
• Support and escalation. 2nd line escalation point for the IT Helpdesk on security and workplace issues, and a trusted contact for other teams with IT Operations questions.

Also part of the role

Supporting the security of our server and cloud environment, Group Policy and privileged access (PIM/PAM), as well as documentation, security policies, audits, and our Disaster Recovery and Business Continuity work.

You will have plenty of opportunity to shape how we do things. If you see a smarter or safer way to work, we want to hear it.

Your future team

You will be part of the Workplace team, which runs our workplace environment and IT Helpdesk as a part of IT Operations. You will work daily with the Helpdesk and with the rest of the operations team, who own our global infrastructure and services. Together with the Security Engineer working with infrastructure, you form the core of our security engineering: you own the workplace side, they own the infrastructure side. You will also work with our SOC provider and external security partners. It is a hands‑on, collaborative environment where knowledge‑sharing makes everyone better.

Who are you?

You enjoy solving problems hands‑on and take ownership of your area. You are comfortable in a 2nd line support role and see every support case as a chance to make the environment a little more secure.

We expect that you have:

• Hands‑on experience administering and securing endpoints with Microsoft Intune, including Windows Autopilot
• Working knowledge of Microsoft Defender, Entra ID and Conditional Access
• Experience from IT Operations or 2nd line support, helping end users and other IT teams
• A structured, analytical approach to problem‑solving
• Strong communication skills, and the ability to explain technical topics to non‑technical colleagues
• Fluency in English. Swedish is a plus

It is a plus if you also have:

• Experience with macOS and mobile device management (iOS, Android)
• Experience with Microsoft Sentinel and Microsoft Purview (DLP, sensitivity labels)
• PowerShell or other scripting for automation
• Experience from a regulated environment, such as financial services
• Microsoft certifications such as MD‑102, SC‑200 or SC‑300, or equivalent experience

Do not worry if you do not check every box. If you are curious, driven and eager to grow into the role, we would still love to hear from you.

Worth knowing

This is a full‑time, permanent position based in Málaga or Szczecin. Hybrid work flexibility is available. You will report into IT Operations and work in close proximity to the IT Helpdesk and the rest of the operations team, which gives you fast escalation paths and strong support from day one.

We believe diverse teams build better solutions, and we welcome applicants from all backgrounds.