Security Engineer - Oslo

As a Security Engineer you will be part of the Product and Application Security team and you will help the team create and provide (Greenfield) services and tools within the data security domain. The overall purpose is to help our brands secure their products, customers information and enable competitiveness by strengthening our security. As such you will work closely together with our brands and functions in order to implement the needed best practice in terms of processes, tools and awareness.

Schibsted is an innovative and entrepreneurial leader in the Nordics, with a proven track record of success. Our philosophy is built on challenging the status quo to lead the market. The security teams within Schibsted must innovate our security culture to design a security management approach that protects our trust, motivates our culture and enables our competitiveness. This requires a risk-based approach of security integration into our corporate and brand strategies, processes and technology.

Your main responsibilities will be:

• Expert guidance on data security to the tech teams across Schibsted
• Review systems and code for security weaknesses and suggest security improvements
• Documenting target architecture and roadmap for implementing it in a format that can be easily communicated
• Development and implementation of shared tooling, platforms and processes in the data security domain
• Security evangelist across Schibsted to promote, change and integrate security governance across Schibsted business and operations
• Help build and improve the security services the team provides such as:
  • Secure Development Lifecycle
  • Vulnerability Management
  • Security Assessment
  • Automated Risk Scoring
  • Security Training
  • Security Champions Program
  • Automated breach detection and response
  • Incident response
  • Cloud Security

Skills and Requirements:

• Experience with development (Java, C#, Python, Javascript or others)
• Experience with DevOps and infrastructure as code
• Working application security expertise across cloud IaaS and SaaS environments, including direct security management experience with AWS, Google or Azure
• DevSecOps knowledge and implementation expertise with “automate everything” mindset
• Knowledge about security in containers
• Working practical knowledge of full security suite of controls from identity access management across network and application security with both on-premise and SaaS-based application solutions
• Excellent communications skills with an entrepreneurial spirit
• Ability to proactively solve problems and react to security challenges in real-time
• Excellent skills in spoken and written English
• Bachelor's degree in computer science or equivalent

Personal profile:

• Positive and can-do attitude
• Prestigeless in communication towards business and local tech teams. Solution oriented
• Good listening capability
• Deep interest and curiousness in the technology space of data security
• Perseverance and focus on implementing from start to completion

We offer you:

• Plenty of challenges and opportunities
• Amazing colleagues
• Personal development plan
• An exciting position in the heart of one of the biggest media and tech companies in Norway and Sweden.