Security Engineer, Visma Sign

Overview

We are looking for a versatile Security Engineer to bolster our capabilities in the Infosec domain for Visma Sign. This is a hands-on role where you apply your skills to ensure that security is woven into the development lifecycle and operating culture. You contribute to our application stack using PHP, .NET, React.js managed via Terraform and hosted on GCP as both a security specialist and as a hands-on developer.

Responsibilities

• Design, manage, and implement security infrastructure, and support the implementation of security controls across the software ecosystem.
• Perform deep-dive code reviews and provide actionable triage for vulnerabilities (OWASP Top 10 etc.).
• Improve our security automation by helping integrate and manage SAST, DAST, and SCA tools directly into our CI/CD pipelines to ensure security as code.
• Own the Infosec domain governance by running security audits and reviews, managing threat mod...