Job summary
We are looking for a Senior Manager to lead a team of security engineers responsible for secure software delivery, cloud and Kubernetes security, vulnerability management, and security automation. This leadership role involves defining security strategies, managing teams, and collaborating with engineering and product leaders to ensure secure software development practices across the organization.
Location and work setup
- Location
- Trondheim
- Work setup
- On-site
Responsibilities
Lead and mentor a team of DevSecOps, application security, and security engineering professionals. Define vision and roadmap for DevSecOps and application security capabilities, setting objectives and KPIs aligned with business goals. Promote a culture of collaboration and continuous learning. Drive adoption of secure software development lifecycle practices, integrate security into software delivery and product lifecycle. Lead security automation efforts in CI/CD, define standards for scanning and supply chain security, and ensure tooling integration. Collaborate with platform engineering to enhance cloud and Kubernetes security, establish security baselines and drive posture management. Own risk-based vulnerability management strategies, define prioritization and remediation frameworks, and work with engineering teams to improve outcomes. Act as a trusted advisor, communicate risks and progress to leadership, and build partnerships across teams. The role requires on-site work five days a week to support collaboration and innovation.
Qualifications
Experience leading security engineering teams with expertise in DevSecOps and application security. Strong knowledge of secure software development lifecycle, threat modeling, and secure design principles. Proficiency in cloud security including Kubernetes, security automation tools and integration in CI/CD pipelines (such as SAST, DAST, SCA, IaC scanning). Ability to establish and track security KPIs and vulnerability management processes. Excellent leadership, stakeholder management, communication skills, and ability to influence technology decisions. Willingness to work primarily on-site.