Application Security engineer
Primary stack
Job description
Application Security Engineer
We are looking to extend our cybersecurity team to support Schibsted Media and the journalists along their journey for free and independent press. Located in Norway and Sweden, the team is responsible for providing, supporting, and maintaining cybersecurity tools for the company as well as providing safe products and services to our customers and journalists. We are part of the tech department, the cybersecurity team collaborates with the other part of the organisation: journalists, editors, IT infrastructure, network, user devices, collaboration software…
About the Position
As an Application Security Engineer, you will be instrumental in fortifying our applications and products against potential threats and vulnerabilities. You will work closely with software developers, architects, and system engineers to integrate security measures throughout the software development lifecycle. Your expertise will be crucial in conducting security assessments, implementing best practices, and ensuring the integrity and resilience of our digital assets.
Responsibilities
- Support the different teams in remediating security issues or vulnerabilities in accordance with the best practices.
- Contribute to the development of security training and education programs.
- Collaborate with cross-functional teams to integrate security into the software development lifecycle.
- Assist in the development and maintenance of security documentation, policies, and procedures to ensure compliance with regulatory requirements and industry standards.
- Stay updated on emerging threats and industry trends, making recommendations for continuous improvement of our security posture.
- Implement and manage security tools and technologies to enhance application security.
- Act as a key contributor to building a robust cybersecurity culture within the organisation.
Requirements
- Background in software development, pentest of web applications, infrastructure, and network.
- Good knowledge of common application security vulnerabilities (e.g., OWASP Top 10) and mitigation techniques.
- Experience with security assessment tools such as Burp Suite, OWASP ZAP, and Metasploit.
- Proficiency in programming languages commonly used in web development such as Java, Python, along with familiarity with web technologies like JavaScript, HTML, and CSS.
- Excellent analytical and problem-solving skills, with the ability to prioritise and manage multiple tasks effectively.
- Strong communication and interpersonal skills, with the ability to collaborate effectively with both technical and non-technical stakeholders.
Locations
- Oslo, Norway
- Stockholm, Sweden
Remote Status
- Hybrid
Employment Type
- Full-time
We Offer
- Opportunity to work in a dynamic and innovative environment.
- Be part of a team that values cybersecurity and digital safety.
- Competitive salary and benefits package.
About the Company
Schibsted is a leading media company with a strong commitment to free and independent press. We operate in multiple countries and provide a wide range of digital products and services to millions of users worldwide.
© Schibsted. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
Media,Online Marketplaces,Technology
About the Company Schibsted & Vend Polska is a joint venture between Schibsted and Vend, operating from offices in Kraków and Gdańsk. The company builds technology for leading media houses and marketplaces across the Nordics. Their solutions support newsrooms, streamline publishing, and facilitate buying and selling. The company operates in small, cross-functional teams where product, design, and engineering collaborate closely. Decisions are made with a focus on measurable impact on users, and the company embraces a culture of continuous learning, experimenting, measuring, and adapting. Products, Services & Tech Stack Core Solutions Newsroom tools Publishing and personalization systems Video and audio infrastructure including podcasts Subscription and payment modules Advanced advertising technology Search and ranking engines Classifieds systems Payment solutions Customer-facing features Technologies & Frameworks PostgreSQL C4 model Structurizr iOS Live Activities Project Scope & Target Clients Client Base Leading media houses Online marketplaces Engineering Scale The company works on projects that range from building newsroom tools and publishing systems to creating search and ranking engines and classifieds systems. The complexity of engineering projects varies based on the specific needs of media houses and marketplaces.