Application Security Engineer

THIS IS US, YOUR NEW COLLEAGUES
Being part of the Development Practices Centre of Excellence (COE) connects you to a large Software Development community. We support our community to build competences in many areas of Software Development, drive development standards and best practices across the Software Development Lifecycle (SDLC), support & coach our community with Development platforms & tools.

At Centre of Excellence we want to be just that; Excellent and market leading. We are at the forefront of technology, always striving to improve ways of working to meet the needs of the delivery. With us you’ll get to collaborate with people with huge knowledge and experience, all curious of understanding what we should do to help others to succeed.
A typical day in the COE is… there is no typical day. Every day brings something new, exciting and challenging, and we do it together. Are you ready to join us?

Role Description
We are now looking for an Application Security Engineer to join our Development Practice Team. We are looking for someone who has a real interest and passion for application security and has a good technical background. Your ability to learn new things, to inspire others around you and your excellent communication skills maybe just what we are looking for. You have a continuous improvement mind-set and your experience as a senior developer or IT Architect is a great foundation to take this exciting step in your career.

You will:
Support teams in how to analyse, assess, and respond to various internet threats throughout the Software Development lifecycle
Provide application security guidance (supporting the SDLC) on a constant stream of new products and technologies
Conduct security code reviews ensuring adherence to mandatory coding practices
You will support & guide teams in building security into their Software Development Lifecycle
Support delivery teams in how to develop solutions that are inherently secure
Be a security subject matter expert and answer application security questions, helping development teams to build secure applications from the start
Scale security effort by empowering teams with the right guidance, patterns and training in how to apply application security in their solutions
Act as a role model for secure software development
Advise Delivery Organization leadership team on how to apply application security across its products

Your Experience
You are a strong communicator that is comfortable working close to development teams and can influence at different levels of the organization. You think like an attacker so that you can develop threat models and help teams reason through different approaches to reducing risk.

You already have:
Solid software engineering experience in one or more general purpose languages and have experience in developing RESTFUL API
Experience with CI/CD pipelines
A good understanding of application security and you have experience implementing attack and defence techniques to OWASP Top 10 and OWASP Top 10 API vulnerabilities
Experience implementing security coding practices ASVS
Experience in implementing Application Security Testing processes & tools is an advantage
A desire to scale security through simple design, abstraction and education
Strong technical background, including 8 years of experience with software engineering and systems design

It is an advantage to:
Have one or more recognized security certifications as: OSCP, CISSP, and have experience with security maturity models frameworks like OWASP SAMM or BSIMM
Experience analyzing and improving product and software security at scale is an advantage

What we can offer you
Application security is an area of growing importance. While we can’t offer you an effortless job we can offer you a chance to be part of an exciting, growing and evolving domain. We are ready to help you develop and gain experience in areas you need to be a successful Application Security Engineer. Our Development Practices team is fun to work with, diverse and we are all passionate about developing, supporting and helping others in many aspects of software development.

Contact Details:
Hiring Manager: Sarah Hellström, Director Development Practices, COE, Group IT, +46 739 02 5787
H Business Partner: Maria Bernhardsson, HRBP, Group IT, +46 765 53 65 21