Sr. Security Engineer, Infrastructure

Varo is an entirely new kind of bank. All digital, mission-driven, FDIC insured and designed for the way our customers live their lives. A bank for all of us.Varo’s Security Engineering team’s mission is to help the organization conduct business in a secure manner without hindering developer agility or product innovation. The team works hand-in-hand with engineers across the organization as we innovate in the banking industry. We practice the “DevSecOps” philosophy and build security automation early into the process of everyday engineering functions from software engineering, to cloud infrastructure, and IT.

What you’ll do

• Implement security best practices in AWS infrastructure and harden it using CIS Benchmarks and others like it.
• Review current infrastructure stack and changes from a security perspective and provide recommendations
• Drive infrastructure directions, configurations, and solutions in collaboration with other teams
• Identify the trade-offs necessary between security and engineering velocity
• Automate security controls to the extent that it requires minimal human interaction
• Review security alerts and reports on a daily basis and work closely with Security Operations and Site Reliability Engineers on investigations or remediation
• Communicate across various engineering teams and prioritize incoming requests 

You’ll bring the following required skills and experiences

• Bachelors in Computer Science or a related field with 3+ years of technical experience in an Infrastructure, SRE, or DevOps role; or Masters in Computer Science or a related field with 2+ years of technical experience
• 3+ years in an Infrastructure engineering or DevOps role
• Hands-on experience with AWS security tools like AWS Guard Duty, Macie, Config, or WAF
• Experience in Identity and Secrets management tools like AWS IAM, AWS KMS, and/or Hashicorp Vault
• Experience in using programming/scripting languages to automate tasks and manipulate data e.g. Python, Go, Bash, Powershell
• Experience with Infrastructure as Code like Cloudformation,  Terraform, or Ansible
• Experience with container security and orchestrations tools and cloud workload protection management

#MidSeniorWe recognize not everyone will have all of these requirements. If you meet most of the criteria above and you’re excited about the opportunity and willing to learn, we’d love to hear from you!About VaroVaro launched in 2017 with the vision to bring the best of fintech into the regulated banking system. We’re a new kind of bank – all-digital, mission-driven, FDIC-insured, and designed around the modern American consumer. As the first consumer fintech to be granted a national bank charter in 2020, we make financial inclusion and opportunity for all a reality by empowering everyone with the products, insights, and support they need to get ahead. Through our core product offerings and suite of customer-first features, we aim to address a broad range of consumer needs while profitably serving underserved communities that have been historically excluded from the traditional financial system.We are growing quickly in our hub locations of San Francisco, Salt Lake City, and Charlotte along with colleagues located across the country. We have been recognized among Fast Company’s Most Innovative Companies, Forbes’ Fintech 50, and earned the No. 7 spot on Inc. 5000’s list of fastest-growing companies across the country.Varo. A bank for all of us.Our Core Values- Customers First- Take Ownership- Respect- Stay Curious- Make it BetterLearn more about Varo by following us:Facebook - https://www.facebook.com/varomoneyInstagram - www.instagram.com/varobankLinkedIn - https://www.linkedin.com/company/varobankTwitter - https://twitter.com/varobankEngineering Blog - https://medium.com/engineering-varoSoundCloud - https://soundcloud.com/varobankVaro is an equal opportunity employer. Varo embraces diversity and we are committed to building teams that represent a variety of backgrounds, perspectives, and skills. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.Beware of fraudulent job postings!Varo will never ask for payment to process documents, refer you to a third party to process applications or visas, or ask you to pay costs. Never send money to anyone suggesting they can provide work with Varo.  If you suspect you have received a phony offer, please e-mail [email protected] with the pertinent information and contact information. CCPA Notice at Collection for California Employees and Applicants: https://varomoney.box.com/s/ylg3yvjgdtqollctztvhujaa30z5ofi6