Security Vulnerability Lead | SCA & Incident Response

Laerdal Medical; Stavanger; On-site; NOK 900,000 - 1,200,000; Full time

Benefits offered by this job

Meaningful work

Growth opportunities

Inclusive international environment

Flexible work arrangements

Job summary

Laerdal Medical is seeking a Security Vulnerability Lead in Stavanger to drive software composition analysis and vulnerability management across product lines. You will coordinate scans, manage the SCA platform, and work with development teams to embed security into daily workflows.

You will report to the Head of Digital Product Security and partner with SecOps and external teams to improve remediation SLAs and incident response.

Qualifications

• Minimum 3–6 years of experience in information security with documented vulnerability management/incident response
• Understanding of cyber threats, attack techniques, and risk assessment methodologies
• Familiarity with CVEs, CVSS, and architectural risk analysis/threat modeling
• Ability to collect, analyze, and correlate threat intelligence
• Experience working with application architecture and development
• Strong communication skills and the ability to advise development teams on security risk
• Ability to work effectively under pressure

Responsibilities

• Standardize how vulnerabilities are assessed, prioritized, reported and handled
• Own and operate the SCA and vulnerability tracking platform (OWASP Dependency Track)
• Coordinate vulnerability scans and penetration tests (including external SecOps)
• Build and maintain incident response procedures and playbooks

Skills

Vulnerability management

Security assessments

Threat modeling

Incident response

Security architecture

Communication skills

Education

Higher IT degree

Certifications advantageous

Job description

Laerdal Medical is seeking a Security Vulnerability Lead in Stavanger to drive software composition analysis and vulnerability management across product lines. You will coordinate scans, manage the SCA platform, and work with development teams to embed security into daily workflows.

You will report to the Head of Digital Product Security and partner with SecOps and external teams to improve remediation SLAs and incident response.