Security Engineer, Core

Smarte Penger; Oslo fylke; Hybrid; NOK 900,000 - 1,300,000; Full time

Job summary

Vend is seeking a Security Engineer to own application security end-to-end, from bug bounty triage to incident response. You will help scale security with AI agents and work across Nordic offices (Stockholm, Oslo, Aarhus) with flexible remote days. A production security mindset and strong code experience are essential.

Join a team focused on measurable improvements, collaboration across platforms, and shaping security practices for a modern, AI-driven environment.

Qualifications

• Security vulnerabilities in real applications—identify, fix, and verify impact.
• Production-grade engineering mindset; ship code and build preventive security tooling.
• Hands-on with AI and agents to enhance security investigations.

Responsibilities

• Own application security end-to-end: bug bounty triage, code scanning, vulnerability management, and incidents.
• Develop and deploy AI agents to assist security investigations and scale the work.
• Collaborate with the Nordics delivery platform teams to implement security best practices.

Skills

Security experience

Engineering background

Hands-on with AI

Fast learner

English fluency

Education

CS degree or equivalent

Job description

You? Empathetic with the people you work with, proactive about the work itself, and creative about how you solve it. Your passion is squashing bug classes at scale and helping developers without blocking them

Role? As a Security Engineer, you will own application security work end to end: bug bounty triage, code scanning, vulnerability management, and incidents. AI agents are a big part of how we scale that work. You will use them every day and help build new ones.

Location? Join us in our Stockholm, Oslo, or Aarhus office with the flexibility to work 3 days per week remotely.

Company? Vend, home of FINN, Blocket, Tori, Oikotie, DBA and Bilbasen. Around 500 developers deploy code to production several thousand times a week.

Why us? Most security teams are still deciding what to do with LLMs. We have spent a year running agents on production security work and measuring what actually helps. You will join while we are still working out the methods, and help shape them.

Sounds like your cup of tea? Check out the details below!

THE OPPORTUNITY IN A NUTSHELL

You? Empathetic with the people you work with, proactive about the work itself, and creative about how you solve it. Your passion is squashing bug classes at scale and helping developers without blocking them

Role? As a Security Engineer, you will own application security work end to end: bug bounty triage, code scanning, vulnerability management, and incidents. AI agents are a big part of how we scale that work. You will use them every day and help build new ones.

Tech stack? Our marketplaces run on Java/Kotlin, JavaScript/TypeScript, C# and Go , and some teams even use Haskell. We run on AWS and GCP, and most apps deploy to Kubernetes. We build our agents with whichever models fit the job best

Location? Join us in our Stockholm, Oslo, or Aarhus office with the flexibility to work 3 days per week remotely.

Company? Vend, home of FINN, Blocket, Tori, Oikotie, DBA and Bilbasen. Around 500 developers deploy code to production several thousand times a week.

Why us? Most security teams are still deciding what to do with LLMs. We have spent a year running agents on production security work and measuring what actually helps. You will join while we are still working out the methods, and help shape them.

Sounds like your cup of tea? Check out the details below!

WHO ARE YOU?

• Security Experience: You have found and fixed vulnerabilities in real applications. You are comfortable in code you did not write, and can tell an impactful finding from noise.
• Engineering Background: You have shipped code to production. You would rather build the thing that prevents a bug class, or the agent that finds it, than write the report about it.
• Hands-on with AI: You already use LLMs in your daily work and want to push them further, by giving agents tools, context and harder problems. Experience building agents is a plus, but not required.
• Fast Learner: You pick up new, complex topics quickly. In this field, what worked six months ago might not be the best approach today.
• English Fluency: You write and speak English well. It is the working language across our teams in Norway, Sweden, Denmark, Poland, and Finland.
• Education: A degree in Computer Science or equivalent practical experience. We value different paths into security.

WHAT'S THE JOB LIKE?

Day-to-day work

We used to automate with code. Now we automate with reasoning. Security scanners find patterns, but confirming a real risk takes investigation: tracing a request across services, finding who owns them, checking how they are exposed, reading logs, and testing whether an attack works. We are teaching agents to do more of that investigation, so you can spend your time on the findings that matter.

The Product Security Team

We are seven people spread across the Nordics, and we meet up regularly to work together. We are part of the Delivery Platforms area in Vend. Core Delivery Platforms helps Vend create real value by turning delivery into a trusted, measurable flow. We build composable, self‑serve platform capabilities and provide services that reduce friction and power the flow that connects build, data, and AI, so ideas become outcomes faster.

If you want to learn more about Emil and the team, you can follow this Link here: vend.com/news/inside-vends-product-security-team-a-year-of-ai-agents-on-our-production-systems

QUESTIONS?

Emil Vaagland, Head of Product Security, is happy to provide information about the daily work and answer any questions you may have about the role, you can reach out via email: emil.vaagland[AT]vend.com. For the recruitment process and other topics, you can reach out to Clayton Don Corda, Senior TA Partner, via clayton.don.corda[AT]vend.com

Om bedriften

At Vend, our mission is simple: Smart choices made easy.

We’re here to make sustainable living effortless through seamless digital experiences. As part of a dynamic family of marketplaces, including FINN, Blocket, Tori, Bytbil, Oikotie, Bilbasen, and DBA, we connect people with services and products that matter.

Driven by purpose and curiosity, we constantly evolve to meet today’s needs and shape a smarter, more sustainable tomorrow.

At Vend, your time matters.
We want you to explore new paths to smarter. Be curious with technology and lean forward. Dare to try, learn, and try again, as we innovate, grow and succeed together. Because your time matters. And when spent wisely, it creates value for you, for Vend, and society as a whole.