Security Engineer: Automation, EDR & Threat Hunting

Varo Bank; United States; On-site; USD 120,000 - 170,000; Full time

Job summary

Varo Bank is seeking a Security Engineer to secure banking systems, automate defenses, and protect customers and employees. You will write Python scripts for security checks, manage EDR across laptops and servers, and collaborate with the financial crimes team to stop insider threats.

The role requires hands-on experience in Python, EDR platforms, and detecting malicious activity, with a focus on phishing mitigation and cross-team collaboration.

Qualifications

• Python scripting to automate security tasks and API integrations.
• Hands-on experience managing an enterprise EDR platform (CrowdStrike, Defender, or SentinelOne).
• Experience writing security rules (Sigma, YARA, or SIEM query languages).
• Ability to work with non-technical teams on fraud and insider threat investigations.
• Familiarity with anti-phishing vendor platforms to identify and report malicious domains.

Responsibilities

• Automate Security Checks: write Python scripts to ensure security tools are installed and functioning on all company systems.
• Write Detections: create and fine-tune alert rules to spot threats and suspicious activity.
• Manage EDR: configure and monitor our Endpoint Detection and Response platform across devices and servers.
• Track Down Phishing Sites: use external tools to find fake bank sites and have them taken down.
• Stop Insider Threats: collaborate with the financial crimes team to safeguard against internal fraud and data theft.

Skills

Python programming

EDR experience

Detection engineering

Collaboration skills

Phishing mitigation

Tools

CrowdStrike

Microsoft Defender

SentinelOne

Job description

Varo Bank is seeking a Security Engineer to secure banking systems, automate defenses, and protect customers and employees. You will write Python scripts for security checks, manage EDR across laptops and servers, and collaborate with the financial crimes team to stop insider threats.

The role requires hands-on experience in Python, EDR platforms, and detecting malicious activity, with a focus on phishing mitigation and cross-team collaboration.