Security Vulnerability Lead

Laerdal Medical; Stavanger; On-site; NOK 900,000 - 1,200,000; Full time

Benefits offered by this job

Meaningful work

Growth opportunities

Inclusive international environment

Flexible work arrangements

Job summary

Laerdal Medical is seeking a Security Vulnerability Lead in Stavanger to drive software composition analysis and vulnerability management across product lines. You will coordinate scans, manage the SCA platform, and work with development teams to embed security into daily workflows.

You will report to the Head of Digital Product Security and partner with SecOps and external teams to improve remediation SLAs and incident response.

Qualifications

• Minimum 3–6 years of experience in information security with documented vulnerability management/incident response
• Understanding of cyber threats, attack techniques, and risk assessment methodologies
• Familiarity with CVEs, CVSS, and architectural risk analysis/threat modeling
• Ability to collect, analyze, and correlate threat intelligence
• Experience working with application architecture and development
• Strong communication skills and the ability to advise development teams on security risk
• Ability to work effectively under pressure

Responsibilities

• Standardize how vulnerabilities are assessed, prioritized, reported and handled
• Own and operate the SCA and vulnerability tracking platform (OWASP Dependency Track)
• Coordinate vulnerability scans and penetration tests (including external SecOps)
• Build and maintain incident response procedures and playbooks

Skills

Vulnerability management

Security assessments

Threat modeling

Incident response

Security architecture

Communication skills

Education

Higher IT degree

Certifications advantageous

Job description

Make a difference with Laerdal where immersive technology transforms healthcare quality and education across the globe. With over 2,200 colleagues, join a team where collaboration and engagement are prioritized in helping save one million more lives, every year, by 2030.

Laerdal Medical is a global, family-owned company headquartered in Stavanger, Norway. With the vision "Helping Save Lives", Laerdal develops products and solutions in medical simulation, training, and therapy. The company has approximately 1,600 employees in more than 20 countries, serving healthcare institutions, educational institutions, and emergency services worldwide.

About the role

As Security Vulnerability Lead at Laerdal Medical, you will be the security team's operational driving force in software composition analysis. You will ensure that the organization detects, assesses, and manages vulnerabilities across its products and product infrastructure, and is prepared to handle security incidents within the same scope. You will be reporting to the Head of Digital Product Security. Developer know-how is a key trait for success in this role, as you will work closely with development teams to integrate security into their daily workflows.

Key Responsibilities

• Help development teams standardize how vulnerabilities are assessed, prioritized, reported, and handled, in line with L2DP's triage process and remediation SLAs
• Own and operate Laerdal's software composition analysis (SCA) and vulnerability tracking platform (OWASP
• Dependency Track) and help development teams integrate it into their workflows
• Coordinate vulnerability scans and penetration tests, including work by the external SecOps-teams
• Build and maintain incident response procedures and playbooks

Required Qualifications

• Experience with vulnerability management and security assessments of systems and applications
• Understanding of cyber threats, attack techniques, and risk assessment methodologies
• Familiarity with and understanding of CVEs and CVSS
• Familiar with architectural risk analysis/threat modeling
• Ability to collect, analyze, and correlate threat intelligence
• Experience working with application architecture and development
• Strong communication skills and the ability to advise development teams on security risk
• Ability to work effectively under pressure

Preferred Qualifications

• Experience working in a global organization
• Competence in digital forensics and evidence collection
• Experience with automation of vulnerability management and security operations (SOAR)
• Familiarity with the frameworks such as MITRE ATT&CK, CWE and CAPEC
• Knowledge of cloud security (Azure, AWS, GCP)
• Understanding of security challenges in development environments (npm/yarn supply chain, C++ memory safety, ML pipeline integrity)
• Familiarity with industry-specific requirements for medical devices (MDR, IEC 62443)
• Knowledge of SBOM standards and tools (CycloneDX, SPDX)

Education and Experience

• Relevant higher education in information technology, cybersecurity, information security, or equivalent
• Minimum 3-6 years of experience in information security, with documented experience in vulnerability management and/or incident response
• Relevant certifications are an advantage, e.g., GCIH, GCFA, GPEN, CEH, OSCP, ISO 27001 Lead Auditor

What we offer

• Interesting and meaningful work contributing to our mission
• Opportunities for personal and professional growth
• A great, diverse, inclusive, and international work environment
• Innovative and forward-thinking technology
• Competitive compensation and benefits package
• Flexible work arrangements, an extensive wellbeing program with social, cultural and sports activities and benefits such as discounted public transport, wardrobe with towel service, company cabins, and more.

Laerdal Medical is an inclusive employer that values diversity. We encourage all qualified candidates to apply, regardless of gender, age, ethnic background, disability, sexual orientation, or beliefs.

Please note that we use Semac background checks in our recruitment process.

For questions regarding this role, please contact [e-mail].