Principal Security Engineer

What you tell your friends you do...

… I make sure people don’t click the “URGENT” messages in their inbox from their [email protected].

What you will really be doing...

• Ensuring compliance with security standards.
• Training internal teams on security aspects.
• Working closely with the team to identify and respond to security incidents.
• Providing subject matter expertise on topics such as secure design, security controls, encryption, programming, and web security standards.
• Designing, implementing, and operating IT security tools.
• Establishing and following up processes for secure development.
• Taking ownership for parts of the ISO 27001 process.

How you will be doing this…

• Working together with a team of security professionals to create and maintain security infrastructure.
• Working together with internal teams to micromanage security aspects.

Team

• Small team of strong security professionals.
• Will grow exponentially in the coming year.

Tech

• Application security tools such as SAST, DAST, IAST, SCA. Preferably experience with implementation, use and tuning.
• Threat modelling, containers, and Kubernetes.
• Infrastructure as code tools - Terraform, Cloud formation and / or Azure ARM, Bicep.

Skills & Requirements

• Minimum 5 years of experience in cybersecurity.
• Programming skills and the ability to think like an attacker.
• Eligible for NATO security clearance.
• Experience with a SaaS cloud solution product.
• Experience implementing Security Champion programs.
• Experience with DevSecOps and / or S-SDLC and of OWASP Top 10 and ASVS.
• Certified CISSP, CCSP, CISA, CISM, CCSK, CompTIA Security+, GIAC Cloud Security Essentials, Ethical Hacker.
• Capable of building successful relationships across different teams.

We offer:

• Money.
• A beefy enough MacBook Pro or equivalent laptop running Windows.
• Tech talks, lunch and learns…
• To help you keep your money, we also chip in on your pension, pay for your travels and keep you safe with insurance.
• Speaking of safe, we have our very own private health clinic.
• Room for you to do things your way.
• Lots of things you can learn through our skilled sparring partners.
• 25 days of paid leave, so long as you promise to come back! Maybe you want to use a couple of days in one of our cabins; Gaustablikk, Beitostølen, Hafjell, Tjøme ++?
• We like to inspire your passion by giving you the opportunity to visit events.
• Relocation support.
• And yes, we also have the industry standard perks such as a free phone plan, broadband at home, hardware, gym, beer, ping pong tables, great lunch, team activities, and awesome parties.