Enterprise Security Services Lead

AutoStore AS; Oslo; On-site; NOK 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Health insurance

Pension plan

Flexible work options

Career opportunities

Structured onboarding

Job summary

AutoStore AS seeks an experienced Enterprise Security Services Lead to coordinate security across enterprise infrastructure, apps, and third-party ecosystem. You will drive vulnerability management across servers, endpoints, networks, and applications, ensuring compliance with AutoStore security standards.

The role covers application and third-party security, working with internal teams and external providers to strengthen secure development, manage testing and remediation, and ensure suppliers

Qualifications

• 10+ years of cybersecurity experience, including 5+ years in senior/app security leadership.
• Strong background in enterprise vulnerability management and security assurance.
• Hands-on in DevSecOps and secure software development within CI/CD environments.
• Familiarity with OWASP, NIST, SAST/DAST/SCA, API and cloud security.
• Experience with cloud environments (Azure, AWS, GCP) and security certifications a plus.

Responsibilities

• Own and develop enterprise vulnerability management capabilities and tooling.
• Identify and remediate vulnerabilities with risk-based prioritisation across orgs.
• Lead third-party and supply chain security including SBOM governance.
• Oversee penetration testing and Red Team activities with remediation cycles.
• Support code signing governance and secure release processes across teams.

Skills

Enterprise security leadership

Vulnerability management

Application security

CI/CD DevSecOps

Cloud security

Tools

CI/CD tooling

SAST/DAST/SCA tools

PKI/code signing

Job description

Ready to strengthen security across our enterprise technology landscape?

We are looking for an Enterprise Security Services Lead to oversee and coordinate security across our enterprise infrastructure, applications, and third‑party ecosystem. You will drive vulnerability management across servers, endpoints, networks, and applications, while ensuring our technology environment meets AutoStore security standards and follows security best practices.

The role also covers application and third-party security, working with internal teams and external service providers to strengthen secure development practices, manage security testing and remediation, and ensure suppliers and integrations meet our security requirements. This is a highly cross‑functional role where you will coordinate security activities across multiple stakeholders and drive improvements in processes, tooling, and security maturity.

Job Responsibilities:

Own and develop our enterprise vulnerability management capabilities, including vulnerability tooling, scanning, data integrations, reporting, and integration with SDLC, DevSecOps, and CI/CD processes.

Work with Risk and technical teams to identify and prioritise vulnerabilities, define remediation plans, track key risk and performance indicators, and coordinate remediation across the organisation.

Third-Party Security & Supply Chain Security

Lead third-party and supply chain security, including supplier risk assessments, security due diligence and continuous monitoring, as well as software supply chain practices such as SBOM governance and open-source risk management.

Penetration Testing & Red Team Services

Lead penetration testing and Red Team activities, ensuring testing reflects business risks and relevant threats, and coordinate remediation and retesting of identified vulnerabilities.

Code Signing Services:

Support code-signing services and governance, ensuring secure certificate and key management, software integrity, and trusted release processes across development teams.

Qualifications:

10+ years of cybersecurity experience, including 5+ years in a senior or leading role within application security, vulnerability management, or security assurance.

Strong experience with enterprise vulnerability management and application security, including penetration testing and third‑party/supplier security.

Hands‑on experience implementing DevSecOps and secure software development practices, including security integration within CI/CD environments.

Good understanding of relevant security frameworks, testing methodologies, and technologies, such as OWASP, NIST, SAST/DAST/SCA, API and cloud security, software supply chain security, and PKI/code signing.

Experience working with cloud environments such as Azure, AWS, or GCP. Relevant certifications such as CISSP, CSSLP, OSCP, or GIAC are an advantage.

We offer:

• Collaborative & Inclusive Culture where we celebrate and value everyone’s contributions, encouraging diverse perspectives in decision‑making.
• Work-Life Balance & Well‑being: We offer 1 hour per week of paid exercise, health insurance, and a generous pension plan, prioritizing your mental and physical well‑being.
• A Creative and Safe Workplace by joining a company experiencing rapid growth, with the stability of being Norway’s first unicorn listed on the Oslo Stock Exchange.
• International and Supportive Environment within a Norwegian multinational that values collaboration and innovation with a structured onboarding plan and career opportunities within the company.

Location: This role can be based in Norway, at our offices in Oslo (Lysaker), Stavanger, or Vindafjord (Nedre Vats).

Application deadline: September 6th.

• CI/CD (Continuous Integration and Continuous Delivery)
• DevSecOps
• Public Key Infrastructure (PKI)

AutoStore™ holds a simple yet powerful vision: to store and move things for everyone, everywhere. Founded in Norway, we've grown into a global technology company. AutoStore uses advanced software to automate and orchestrate order fulfillment.

Our goal is to ensure orders arrive faster than ever, with minimal environmental impact. That’s how we help brands exceed customer expectations. We have more than 1600 systems in nearly 60 countries, and we grow continuously as a community of employees, partners, customers, suppliers, and connected technologies.

Automation should make life easier, and by listening carefully to our community, we innovate to meet the industry’s most complex needs. With AutoStore™, brands gain speed, efficiency, and improved workplaces. And much more floor space.