Security Vulnerability Lead

Laerdal Medical; Norway; On-site; NOK 900,000 - 1,400,000; Full time

Benefits offered by this job

Competitive compensation and benefits

Flexible work arrangements

Wellbeing program with social,cultural

Job summary

Laerdal Medical is seeking a Security Vulnerability Lead to drive software composition analysis and vulnerability management, partnering with development teams to embed security into daily workflows and reporting to the Head of Digital Product Security.

The role coordinates scans and tests with internal and external teams, builds incident response playbooks, and requires hands-on experience with vulnerability assessments, CVEs/CVSS, and architectural risk analysis.

Qualifications

• Experience with vulnerability management and security assessments of systems and applications.
• Understanding of cyber threats, attack techniques, and risk assessment methodologies.
• Familiarity with CVEs and CVSS.
• Familiar with architectural risk analysis/threat modeling.
• Ability to collect, analyze, and correlate threat intelligence.
• Experience with application architecture and development.
• Strong communication skills and the ability to advise development teams on security risk.
• Ability to work effectively under pressure.

Responsibilities

• Standardize vulnerability assessment, prioritization, reporting and remediation per triage SLAs.
• Own and operate SCA and vulnerability tracking platform (OWASP Dependency Track) and integrate it into workflows.
• Coordinate vulnerability scans and penetration tests, including external SecOps teams.
• Build and maintain incident response procedures and playbooks.

Skills

Vulnerability management

Security assessments

Threat intelligence

CVE/CVSS

Threat modeling

Architecture knowledge

Security risk communication

Under pressure

Education

Higher education in IT / cybersecurity

Certifications advantageous

Job description

Make a difference with Laerdal where immersive technology transforms healthcare quality and education across the globe. With over 2,200 colleagues, join a team where collaboration and engagement are prioritized in helping save one million more lives, every year, by 2030.

Laerdal Medical is a global, family-owned company headquartered in Stavanger, Norway. With the vision "Helping Save Lives", Laerdal develops products and solutions in medical simulation, training, and therapy. The company has approximately 1,600 employees in more than 20 countries, serving healthcare institutions, educational institutions, and emergency services worldwide.

About the role

As Security Vulnerability Lead at Laerdal Medical, you will be the security team’s operational driving force in software composition analysis. You will ensure that the organization detects, assesses, and manages vulnerabilities across its products and product infrastructure, and is prepared to handle security incidents within the same scope. You will be reporting to the Head of Digital Product Security. Developer know-how is a key trait for success in this role, as you will work closely with development teams to integrate security into their daily workflows.

Key Responsibilities

• Help development teams standardize how vulnerabilities are assessed, prioritized, reported, and handled, in line with L2DP's triage process and remediation SLAs
• Own and operate Laerdal's software composition analysis (SCA) and vulnerability tracking platform (OWASP Dependency Track) and help development teams integrate it into their workflows
• Coordinate vulnerability scans and penetration tests, including work by the external SecOps-teams
• Build and maintain incident response procedures and playbooks

Required Qualifications

• Experience with vulnerability management and security assessments of systems and applications
• Understanding of cyber threats, attack techniques, and risk assessment methodologies
• Familiarity with and understanding of CVEs and CVSS
• Familiar with architectural risk analysis/threat modeling
• Ability to collect, analyze, and correlate threat intelligence
• Experience working with application architecture and development
• Strong communication skills and the ability to advise development teams on security risk
• Ability to work effectively under pressure

Preferred Qualifications

• Experience working in a global organization
• Competence in digital forensics and evidence collection
• Experience with automation of vulnerability management and security operations (SOAR)
• Familiarity with the frameworks such as MITRE ATT&CK, CWE and CAPEC
• Knowledge of cloud security (Azure, AWS, GCP)
• Understanding of security challenges in development environments (npm/yarn supply chain, C++ memory safety, ML pipeline integrity)
• Familiarity with industry-specific requirements for medical devices (MDR, IEC 62443)
• Knowledge of SBOM standards and tools (CycloneDX, SPDX)

Education and Experience

• Relevant higher education in information technology, cybersecurity, information security, or equivalent
• Minimum 3-6 years of experience in information security, with documented experience in vulnerability management and/or incident response
• Relevant certifications are an advantage, e.g., GCIH, GCFA, GPEN, CEH, OSCP, ISO 27001 Lead Auditor

What we offer

• Interesting and meaningful work contributing to our mission
• Opportunities for personal and professional growth
• A great, diverse, inclusive, and international work environment
• Innovative and forward-thinking technology
• Competitive compensation and benefits package
• Flexible work arrangements, an extensive wellbeing program with social, cultural and sports activities and benefits such as discounted public transport, wardrobe with towel service, company cabins, and more.

For questions regarding this role, please contact [e-mail].

Laerdal Medical is an inclusive employer that values diversity. We encourage all qualified candidates to apply, regardless of gender, age, ethnic background, disability, sexual orientation, or beliefs.

Please note that we use Semac background checks in our recruitment process.