Senior Information Security Engineer

Product, engineering and support teams work out of offices in Linköping, Östergötland County and two nearshore delivery centres. Our engineering group is split into roughly 60 product teams, each owning its services end to end, with on-call shared across time zones.

The role:

We are creating this position because the workload has grown. The Cloud Security team is small and hands-on. We need someone who writes code and automation, not just policy. Remote position. Most of the team is in Linköping, but nobody is required to come in. We keep meetings to a minimum and work mostly async.

Main duties:

• Triage bug bounty reports from HackerOne or Bugcrowd
• Automate security checks in CI/CD pipelines
• Write secure coding guidelines and run developer training
• Coordinate external penetration tests and track remediation
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic

What you need:

• 7+ years in security engineering, application security or a related engineering role
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Experience with SIEM, EDR or vulnerability management tools

Nice to have:

• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)
• IaC scanning with Checkov or tfsec

Compensation and benefits:

• Private health insurance
• Occupational pension
• Five weeks of annual leave
• Wellness allowance
• Training budget
• Flexible working hours

Include your expected salary and earliest start date with your application.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Corvane Cloud AB.