Security Testing Specialist

We are seeking an experienced Security Testing Engineer to join our team at If Forsikring. As a Security Testing Engineer, you will be responsible for conducting and participating in offensive security tests against our applications and systems.

Key Responsibilities:

1. Conduct and participate in offensive security tests against If's applications and systems.
2. Assess security maturity of networks, assets, hardware, platforms, and applications from an adversary point of view.
3. Plan security testing roadmap.
4. Run and maintain automated security scan solutions and attack surface management tools.
5. Report on and prioritize findings to development teams, vendors, and other stakeholders.
6. Support Site Reliability Engineers team and collaborate with development teams to address security defects before, after, and during development.
7. Develop and maintain tools and techniques for security testing and attack surface management.
8. Communicate new developments, breakthroughs, challenges, and lessons learned to relevant team members and leadership.
9. Participate in developing internal processes and frameworks around security testing.
10. Lead and collaborate on additional projects, assignments, or initiatives as required.

Requirements:

1. Suitable degree (e.g., Bachelor's degree in Computer Science or a related field).
2. Related certificates (e.g., OSCP) are considered an advantage.
3. Overall understanding and hands-on experience of IT services, operations, infrastructure, and application development.
4. At least two years performing security testing as a primary job responsibility, including the use of professional penetration testing tools (e.g., Burp Suite).
5. Sound understanding of application and network security vulnerabilities (e.g., OWASP Top 10), defense techniques, and security best practices.
6. Experience with modern application development languages and frameworks (e.g.,, Java, Python, React, Angular).
7. Basic scripting skills in PowerShell and Visual Basic are considered an advantage.
8. Capabilities to communicate fluently in English, both written and oral.
9. Systematic problem-solving approach coupled with strong communication skills and a sense of ownership and drive.

What We Offer:

1. An inclusive work environment where everyone is welcome.
2. Career and development opportunities in the biggest insurance company in the Nordics.
3. Social activities, as well as a highly skilled professional environment.
4. Possibility of hybrid workplace.
5. Health promoting workplace with e.g., wellness allowance and various sports activities.
6. Great insurance benefits.

Additional Facts and Recruitment Process:

Application deadline: Last date to apply is 22nd of September. However, we will start screening and interviewing already during the application period.

Location: Turku, Espoo, Stockholm, Oslo, or Copenhagen.

To apply for the position: Please attach your CV and answer the questions on the application form. Please notice that we are not able to process any applications via email.

Travelling: Some travelling will be required since the role has responsibility throughout the countries in which If operates.

Background check: Final candidates will undergo a background check before a job offer can be presented.

For more information regarding the position, please contact Head of IT Security Mika Rintamäki.