Security Engineer

Varo; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Varo is an entirely new kind of bank committed to security and customer trust. We’re seeking a Security Engineer to automate defenses, write code to automate compliance checks, and protect our banking systems and employees.

You will build detections, tune SIEM rules, manage an enterprise EDR (CrowdStrike, Defender or SentinelOne), hunt phishing sites with external tools, and collaborate with the financial crimes team to prevent insider threats.

Qualifications

• Proven experience building automated security checks with Python.
• Hands-on experience configuring and managing an enterprise EDR platform.
• Experience writing security detection rules (Sigma, YARA, or SIEM languages).
• Ability to collaborate with non-technical teams on fraud investigations.

Responsibilities

• Automate Security Checks: Write Python scripts to verify security tools on all company systems.
• Write Detections: Create and tune alert rules to detect threats and suspicious activity.
• Manage EDR: Configure and monitor our EDR platform across devices and servers.
• Track Down Phishing Sites: Use external tools to find and take down fake banking sites.
• Stop Insider Threats: Partner with the financial crimes team to prevent internal fraud.

Skills

Python

EDR management

Detection engineering

Collaboration

Phishing mitigation

Tools

CrowdStrike

Defender

SentinelOne

Job description

Varo is an entirely new kind of bank. All digital, mission-driven, FDIC insured and designed for the way our customers live their lives. A bank for all of us.

About the Role

We are looking for a Security Engineer to help secure our banking systems, automate our defenses, and protect our customers and employees. In this role, you will write code to automate compliance checks, manage our endpoint defense tools, hunt for phishing sites, and work directly with our financial crimes team to stop insider threats.

How you'll make an impact

• Automate Security Checks: Write and maintain Python scripts that automatically check if our security tools are installed and working properly on all company systems.
• Write Detections: Create and fine-tune alert rules to spot cyber threats and suspicious behavior before they cause harm.
• Manage EDR: Oversee and configure our Endpoint Detection and Response (EDR) platform to monitor and defend all company laptops, desktops, and servers.
• Track Down Phishing Sites: Use our external vendor tools to scan the internet, find fake websites mimicking our bank, and get them taken down.
• Stop Insider Threats: Partner directly with our financial crimes team to design, implement, and monitor safeguards against internal fraud and data theft.

The skills and experiences you'll bring

• Python Programming: Strong ability to write and debug Python scripts to automate routine security tasks and connect different tools via APIs.
• EDR Experience: Hands‑on experience managing and configuring an enterprise EDR platform (such as CrowdStrike, Defender, or SentinelOne).
• Detection Engineering: Experience writing security rules (such as Sigma, YARA, or SIEM‑specific query languages) to detect malicious activity.
• Collaboration Skills: Ability to work clearly and effectively with non‑technical teams, specifically when coordinating on fraud and insider threat investigations.
• Phishing Mitigation: Familiarity with brand protection or anti‑phishing vendor platforms to find and report malicious domains.

For cash compensation, we set standard ranges for all US‑based roles based on function, level, and geographic location, benchmarked against similar‑stage growth companies. Final offer amounts are determined by multiple factors as well as candidate experience and expertise and may vary from the identified range.

Varo is an equal opportunity employer. Varo embraces diversity and we are committed to building teams that represent a variety of backgrounds, perspectives, and skills. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.