Information Security Specialist

Qapital is looking for an Information Security Specialist to join our team in Stockholm! This is a chance to work on a product that has already helped users save more than $2 billion towards their financial goals. When you join Qapital, you will have the opportunity to work in a dynamic fintech environment where you are encouraged to voice your opinions and take part in the decision-making.



About the Role
In this role, you will partner up with our Information Security Officer in our ongoing information security work. In Qapital’s security team we work closely with the business teams to make it easy to work securely and to ensure that security can be maintained without inhibiting their ability to work autonomously towards business goals. In each product team, we work with the team’s security champions to implement security controls early and at every step of the development process.

We are serious about protecting our customer's data and want to create long-term high-security solutions, going beyond check-box compliance. There will be opportunities to adjust the role to the strengths and interests of the right candidate. You’ll also be able to bring new ideas and be a part of improving the way Qapital is working with information security.

In this role you will:

- Automate security tasks e.g. access reviews, review of security hardening, security vulnerability management, etc.

- Partake in or lead risk assessments or vulnerability analysis workshops, and crisis management exercises, with the different business or development teams.

- Support the ISO with creating and maintaining ISMS documentation.

- Perform security evaluations of service providers.

- Perform internal security tests.

- Manage security incidents.

- Operate and improve security tools e.g. vulnerability scanners, code analysis tools, and intrusion detection systems.

- Manage bug bounty program, as well as triage findings.





What we look for in you
- The ability to automate security tasks with at least one scripting language.

- Experience in working with AWS security.

- Experience in working with security solutions based on OIDC, Oauth, and SAML and an understanding of these protocols.

- Experience in documentation e.g. designing and documenting security-relevant processes to meet compliance requirements.

- An understanding of cryptographic concepts like certificate management and cryptographic key management.

- A prestigeless and solutions-oriented attitude.

- An ability to build trust and support members of other teams in taking ownership of security within their domains.

- A willingness to learn and that you are self-motivated to research new security topics when needed.

- Knowledge of privacy regulations like CCNA or GDPR.



About Qapital
Qapital is a new kind of banking experience that empowers people to maximize their happiness by saving, spending, and investing with their goals in mind. By blending behavioral science with technology, Qapital provides people with the tools they need to make managing money easy and fun. Qapital has over 2 million users and 100K+ 5-star ratings. It’s been named “Most Innovative App of the Year” by Google and “Best App for Savings” by Apple.



Application

You can apply without a cover letter and choose whether to attach a cv or a link to your LinkedIn profile.