Enterprise Security Services Lead

AutoStore™; Oslo; Hybrid; NOK 1,000,000 - 1,500,000; Full time

Job summary

AutoStore is seeking an Enterprise Security Services Lead to oversee and coordinate security across enterprise infrastructure, applications, and third-party ecosystems. You will drive vulnerability management across servers, endpoints, networks, and applications, while ensuring our environment meets AutoStore security standards and best practices.

You will coordinate security activities across multiple stakeholders, drive improvements in processes, tooling, and security maturity, and lead

Qualifications

• 10+ years in cybersecurity; 5+ years in senior/app-sec/vulnerability management or security assurance.
• Strong experience with enterprise vulnerability management and application security, incl. pen testing and supplier security.
• Hands-on DevSecOps and secure SDLC practices; CI/CD integration.
• Knowledge of OWASP, NIST, SAST/DAST/SCA, API/cloud security, software supply chain, PKI/code signing.
• Experience with Azure/AWS/GCP; CISSP/CSSLP/OSCP/GIAC certifications advantageous.

Responsibilities

• Own and develop enterprise vulnerability management capabilities, tooling, scanning, and reporting integrated with SDLC/DevSecOps/CI/CD.
• Identify and prioritise vulnerabilities, define remediation plans, track risk metrics, and coordinate remediation.
• Lead third-party and supply chain security, including supplier risk assessments and SBOM governance.
• Lead penetration testing and Red Team activities, coordinate remediation and retesting of vulnerabilities.
• Support code-signing services and governance for secure certificate and key management.

Skills

Vulnerability management

Application security

Penetration testing

DevSecOps

CI/CD security

Cloud security

Security frameworks

Open-source risk

SBOM governance

Job description

We are looking for an Enterprise Security Services Lead to oversee and coordinate security across our enterprise infrastructure, applications, and third-party ecosystem. You will drive vulnerability management across servers, endpoints, networks, and applications, while ensuring our technology environment meets AutoStore security standards and follows security best practices.

The role also covers application and third-party security, working with internal teams and external service providers to strengthen secure development practices, manage security testing and remediation, and ensure suppliers and integrations meet our security requirements. This is a highly cross-functional role where you will coordinate security activities across multiple stakeholders and drive improvements in processes, tooling, and security maturity.

Job Responsibilities

Enterprise Vulnerabilities

• Own and develop our enterprise vulnerability management capabilities, including vulnerability tooling, scanning, data integrations, reporting, and integration with SDLC, DevSecOps, and CI/CD processes.
• Work with Risk and technical teams to identify and prioritise vulnerabilities, define remediation plans, track key risk and performance indicators, and coordinate remediation across the organisation.

Third-Party Security & Supply Chain Security

• Lead third-party and supply chain security, including supplier risk assessments, security due diligence and continuous monitoring, as well as software supply chain practices such as SBOM governance and open-source risk management.

Penetration Testing & Red Team Services

• Lead penetration testing and Red Team activities, ensuring testing reflects business risks and relevant threats, and coordinate remediation and retesting of identified vulnerabilities.

Code Signing Services

• Support code-signing services and governance, ensuring secure certificate and key management, software integrity, and trusted release processes across development teams.

Qualifications

• 10+ years of cybersecurity experience, including 5+ years in a senior or leading role within application security, vulnerability management, or security assurance.
• Strong experience with enterprise vulnerability management and application security, including penetration testing and third-party/supplier security.
• Hands‑on experience implementing DevSecOps and secure software development practices, including security integration within CI/CD environments.
• Good understanding of relevant security frameworks, testing methodologies, and technologies, such as OWASP, NIST, SAST/DAST/SCA, API and cloud security, software supply chain security, and PKI/code signing.
• Experience working with cloud environments such as Azure, AWS, or GCP. Relevant certifications such as CISSP, CSSLP, OSCP, or GIAC are an advantage.

We offer

• A Collaborative & Inclusive Culture where we celebrate and value everyone’s contributions, encouraging diverse perspectives in decision-making.
• Work-Life Balance & Well-being: prioritizing your mental and physical well-being.
• A Creative and Safe Workplace by joining a company experiencing rapid growth, with the stability of being Norway’s first unicorn listed on the Oslo Stock Exchange.
• International and Supportive Environment within a Norwegian multinational that values collaboration and innovation with a structured onboarding plan and career opportunities within the company

This role can be based in Norway, at our offices in Oslo (Lysaker), Stavanger, or Vindafjord (Nedre Vats), or remotely from Switzerland.

Application deadline: September 6th.

All inquiries are treated confidentially.

AutoStore does not accept agency resumes or assistance for this role. Please do not forward resumes to our job's alias or AutoStore employees. AutoStore is not responsible for any fees related to unsolicited resumes. This policy should be respected.