Security Vulnerability Lead — SCA & Incident Response, Flexible Work

Laerdal Medical; Norway; On-site; NOK 900,000 - 1,400,000; Full time

Benefits offered by this job

Competitive compensation and benefits

Flexible work arrangements

Wellbeing program with social,cultural

Job summary

Laerdal Medical is seeking a Security Vulnerability Lead to drive software composition analysis and vulnerability management, partnering with development teams to embed security into daily workflows and reporting to the Head of Digital Product Security.

The role coordinates scans and tests with internal and external teams, builds incident response playbooks, and requires hands-on experience with vulnerability assessments, CVEs/CVSS, and architectural risk analysis.

Qualifications

• Experience with vulnerability management and security assessments of systems and applications.
• Understanding of cyber threats, attack techniques, and risk assessment methodologies.
• Familiarity with CVEs and CVSS.
• Familiar with architectural risk analysis/threat modeling.
• Ability to collect, analyze, and correlate threat intelligence.
• Experience with application architecture and development.
• Strong communication skills and the ability to advise development teams on security risk.
• Ability to work effectively under pressure.

Responsibilities

• Standardize vulnerability assessment, prioritization, reporting and remediation per triage SLAs.
• Own and operate SCA and vulnerability tracking platform (OWASP Dependency Track) and integrate it into workflows.
• Coordinate vulnerability scans and penetration tests, including external SecOps teams.
• Build and maintain incident response procedures and playbooks.

Skills

Vulnerability management

Security assessments

Threat intelligence

CVE/CVSS

Threat modeling

Architecture knowledge

Security risk communication

Under pressure

Education

Higher education in IT / cybersecurity

Certifications advantageous

Job description

Laerdal Medical is seeking a Security Vulnerability Lead to drive software composition analysis and vulnerability management, partnering with development teams to embed security into daily workflows and reporting to the Head of Digital Product Security.

The role coordinates scans and tests with internal and external teams, builds incident response playbooks, and requires hands-on experience with vulnerability assessments, CVEs/CVSS, and architectural risk analysis.