Application Security Engineer

About the role

Schibsted, a leading Nordic media group behind news brands such as Aftonbladet, Svenska Dagbladet, VG and Aftenposten, is looking for an Application Security Engineer to join its cybersecurity team in Stockholm or Oslo. The role suits someone early in their cybersecurity career who wants to develop technical skills, work across a wide range of security challenges and collaborate closely with developers to build safer products.

Key responsibilities

• Help identify and assess security vulnerabilities in applications and digital products.
• Work directly with developers and engineering teams to understand and remediate security issues.
• Participate in security assessments and help integrate security practices throughout the software development lifecycle.
• Support teams in understanding security risks and finding practical solutions.
• Use application security tools and help improve processes and ways of working.
• Share knowledge and collaborate across the organisation to strengthen security awareness and build a stronger security culture.

Required profile

• Some hands-on experience in application security, penetration testing or a related technical field, through employment, internships or personal projects.
• Recent graduate, first security role or skills developed through technical projects.
• Technical curiosity, willingness to learn and interest in making applications more secure.
• Ability to explain technical concepts clearly and collaborate with developers and other teams.

Required skills

• Understanding of common application vulnerabilities such as those in the OWASP Top 10 and how to mitigate them.
• Familiarity with application security testing tools such as Burp Suite or OWASP ZAP.
• Basic understanding of modern software development practices, web technologies and how applications are built.
• Experience with cloud environments, infrastructure security, threat modelling or secure software development is valuable but not required.