IT Security Specialist

Our organization for development support is growing and to be able to continue delivering great result we welcome an IT Security specialist. To fit our agile team, you need to be a senior IT Security specialist with proven experience on designing and maintaining complex IT environments with focus on security. As an agile IT Security specialist, you will have a broad set of responsibilities, as you will assist in the design and maintenance of an environment based both in a classic data center and in AWS from a security perspective. The solution has integrations to several other systems as well that needs to be maintained and reviewed. The system is constantly evolving and growing and needs continuous re-design, automation and adjustment. We strive to always have a modern environment that uses all relevant tools and services, both in the data center and in AWS and you will be the pillar we rely on for advice on the security aspect of these. We aim to have security by design in everything we do, both from a tools standpoint and regarding our Ways of Working. You will be the interface towards out central IT Security department to interpret their requirements and translate that into actions that will make us compliant. This is a hands-on role where you will implement several of the measures you have identified.

You will be working in a newly formed organization called Platform Services, which supports our developers in our four ARTs with tools and processes. Platform Services provides, for example, tools for our build pipes, QA, AWS Platform and release management.

To succeed in this role it’s important that you have a strong internal drive, is comfortable with taking initiatives and drive change and that you understand how to navigate as a part of an agile team in a large organization.

Required Experience / Competences

- Several years of IT Security experience
- Hands-on experience with systems hardening, both Windows and Linux based systems
- Proven knowledge of systems design with security in mind
- Experience of implementing security frameworks for application development, such as SDL
- Experience with security-based infrastructure components such as firewalls
- Experience with network design and segregation for high security
- Knowledge of build pipe and related systems and how to design them with security focus
- Proven experience with setting up and following up on the results from tools for vulnerability management, static and dynamic code analysis and other security tools used in build pipes
- Proven experience with general IT security frameworks such as ISO 27000
- Hands-on experience with Kubernetes and preferably other container related tools


Nice to have

- GitHub knowledge, incl. GitHub actions
- In-depth systems knowledge of Window and Linux
- Development proficiency
- In-depth network knowledge. Structure, segregation, configurations of firewalls, routers, load balancers, etc.
- Scripting knowledge, power shell, perl, python
- Understanding of agile ways of working, especially Scrum and SAFe