Job summary
Seeking a Senior Manager to lead and develop the application security function within a fully remote, growing technology organization. The role combines hands-on technical security expertise with leadership responsibilities overseeing cross-functional IT and compliance teams. The manager will establish security standards, drive vulnerability management, integrate secure development practices, and represent security and compliance to internal and external stakeholders. This position offers autonomy to shape AI-driven security initiatives while supporting scalable and secure business growth.
Location and work setup
- Location
- Norway
- Work setup
- Remote
Salary
USD 177000.00–240000.00 year
Responsibilities
Lead the creation and execution of the application security strategy, oversee vulnerability management, threat modeling, and security reviews. Conduct hands-on security assessments and collaborate with engineering to remediate vulnerabilities. Embed secure practices into the software development lifecycle, including automated security scanning. Develop AI-first security strategies leveraging AI-assisted tools for code analysis, vulnerability triage, and remediation. Manage third-party security assessments and establish zero-trust principles in collaboration with cloud platform teams. Direct incident response for application-layer security issues. Provide leadership and strategic direction to IT and compliance professionals, align cross-functional priorities, and represent security posture and compliance status to leadership and external partners.
Qualifications
Minimum 7 years of security experience with deep hands-on application security expertise. Proven track record of building or maturing application security programs including reviews, threat modeling, and vulnerability management. Strong understanding of secure software design, OWASP, common vulnerabilities, and exploitation techniques. Ability to analyze application code and collaborate with developers on fixes. At least 2 years experience managing specialized security teams while remaining technically engaged. Familiarity with AI-assisted development and security tools, and ability to evaluate their impact and automation in security workflows. Excellent communication skills to translate technical security issues for business leaders and stakeholders. Collaborative leadership style with ability to balance autonomy and alignment across teams. Experience with identity/access management, compliance frameworks like SOC 2, ISO 27001, and GDPR is beneficial but not mandatory.