Cybersecurity Tester for Dynamic Applications

About If Forsikring

• Our company supports the insurance business by maintaining and developing cybersecurity actions within the entire organization.

IT Security Team Overview

If's IT Security team provides security capabilities associated with the total ICT area. Our task is to review and assess the potential risk of new industry threats, as well as implement and manage technologies capable of testing, detecting, investigating, and/or eliminating those threats.

Job Description

We are searching for an experienced Cybersecurity Tester focusing on supporting security functions and related processes. While various security review and testing activities are already taking place, this role would solely focus on security testing If's production applications and systems.

You will have an important internal consultancy role to share knowledge, create instructions, train, and help the dev teams together with Site Reliability Engineers and other parts of If IT.

You will get an opportunity to operate within a very modern hybrid IT environment.

You will be part of an informal and performance-oriented culture and have a flexible work-life where not one day is the same as the other.

Responsibilities:

1. Conduct and participate in offensive security tests against If's applications and systems.
2. Assess security maturity of networks, assets, hardware, platforms, and applications from an adversary point of view.
3. Plan security testing roadmap.
4. Run and maintain automated security scan solutions and attack surface management tools.
5. Report on and prioritize findings to development teams, vendors, and other stakeholders.
6. Support Site Reliability Engineers team and collaborate with development teams to address security defects before, after, and during development.
7. Develop and maintain tools and techniques for security testing and attack surface management.
8. Communicate new developments, breakthroughs, challenges, and lessons learned to relevant team members and leadership.
9. Participate in developing internal processes and frameworks around security testing.
10. Lead and collaborate on additional projects, assignments, or initiatives as required.
11. Show commitment to learning and the never-ending curiosity of all things related to security.

Requirements

In order to succeed in this role, you will need:

1. Suitable degree (e.g., Bachelor's degree in Computer Science or a related field).
2. Related certificates (e.g., OSCP) are considered an advantage.
3. Overall understanding and hands-on experience of IT services, operations, infrastructure, and application development.
4. At least two years performing security testing as a primary job responsibility, including the use of professional penetration testing tools (e.g., Burp Suite).
5. Sound understanding of application and network security vulnerabilities (e.g., OWASP Top 10), defense techniques, and security best practices.
6. Experience with modern application development languages and frameworks (e.g., Node.js, Java, Python, React, Angular).
7. Basic scripting skills in PowerShell and Visual Basic are considered an advantage.
8. Capabilities to communicate fluently in English, both written and oral.
9. Systematic problem-solving approach coupled with strong communication skills and a sense of ownership and drive.

Benefits

In the same way that we place high demands on you as an employee, we also expect you to place high demands on us as an employer.

Here are some of the benefits of working at If:

1. An inclusive work environment where everyone is welcome.
2. Career and development opportunities in the biggest insurance company in the Nordics.
3. Social activities, as well as a highly skilled professional environment.
4. Possibility of hybrid workplace.
5. Health promoting workplace with e.g., wellness allowance and various sports activities.
6. Great insurance benefits.

Additional Facts and Recruitment Process

Application deadline: Last date to apply is not specified.

Location: Various locations throughout Europe.

To apply for the position, please attach your CV and answer the questions on the application form.

Travelling: Some travelling will be required since the role has responsibility throughout the countries in which If operates.

Background check: Final candidates will undergo a background check before a job offer can be presented.