Application Security Engineer - Fortify Web Apps & SDLC

Schibsted; Stockholms kommun; On-site; SEK 700,000 - 900,000; Full time

Job summary

Schibsted is expanding its cybersecurity team to safeguard its applications and products across Sweden and Norway. As an application security engineer, you will partner with software developers, architects and system engineers to embed security throughout the software development lifecycle, performing assessments and guiding best practices.

You will work with cross‑functional teams to remediate issues, develop security training, and maintain documentation while staying ahead of emerging threats

Qualifications

• Experience in software development and security testing across web apps.
• Knowledge of OWASP Top 10 and mitigation techniques.
• Experience with security assessment tools (Burp Suite, OWASP ZAP, Metasploit).

Responsibilities

• Remediate security issues and vulnerabilities with best practices.
• Develop security training and education programs.
• Integrate security into the software development lifecycle.
• Develop and maintain security documentation, policies and procedures.
• Stay updated on emerging threats and industry trends.
• Implement and manage security tools to enhance application security.
• Contribute to building a robust cybersecurity culture.

Skills

Software development

Web app pentesting

Infra & network

OWASP Top 10

Burp Suite

OWASP ZAP

Metasploit

Java

Python

JavaScript

HTML

CSS

Analytical skills

Communication skills

Tools

Burp Suite

OWASP ZAP

Metasploit

Job description

Schibsted is expanding its cybersecurity team to safeguard its applications and products across Sweden and Norway. As an application security engineer, you will partner with software developers, architects and system engineers to embed security throughout the software development lifecycle, performing assessments and guiding best practices.

You will work with cross‑functional teams to remediate issues, develop security training, and maintain documentation while staying ahead of emerging threats