Security Engineer

Clients are mostly credit unions, medical groups and municipal governments in Trøndelag. Certifications across the team include OSCP, GPEN and CISSP. We started in 2022 and have grown to about 43 people. Nobody gets in trouble for clicking a test phish. You report it and move on.

Opalbrook Cyber is hiring a Security Engineer to work remotely from Norway. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Remote position. Most of the team is in Trondheim, but nobody is required to come in.

What you'll do:

• Coordinate external penetration tests and track remediation.
• Respond to security incidents and lead the technical investigation.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Write secure coding guidelines and run developer training.
• Own secrets management, key rotation and KMS policies.
• Review code and pull requests for security issues.

Required qualifications:

• 2+ years in security engineering, application security or a related engineering role.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Programming or scripting ability in Python, Go or similar.

Pluses:

• Contributions to security tools or published CVEs.
• Malware analysis or digital forensics background.

Why work with us:

• Flexible working hours.

We may close the role early, so do not wait too long to apply.

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Opalbrook Cyber AS.