Security Engineer, Product Security

Recorded Future; Göteborgs kommun; On-site; SEK 55,000 - 70,000; Full time

Job summary

A global intelligence company in Gothenburg is looking for an experienced SDLC Architect to lead the design and implementation of a secure Software Development Lifecycle (SDLC) process. The role requires expertise in security automation, risk assessment, and strong communication skills. Candidates should have over 3 years of experience in software development and a commitment to creating a balance between security and developer productivity. Join an inclusive environment with a strong focus on empowering clients with cutting-edge intelligence.

Qualifications

• 3+ years of relevant professional experience.
• Proven background in software development and SDLC.
• Solid expertise in computer security principles.

Responsibilities

• Design, document, and champion a Secure SDLC.
• Integrate security tools into CI/CD pipelines.
• Translate security policies into actionable technical requirements.
• Develop training to empower secure coding practices.
• Collaborate with engineering teams and support security operations.

Skills

SDLC process design

Security automation tools

Risk assessment

Team collaboration

Strong communication

Job description

With 1,000+ intelligence professionals serving over 1,900 clients worldwide, Recorded Future is the world’s most advanced, and largest, intelligence company!

We are seeking a highly experienced and technically proficient SDLC Architect to join our Product Security team. This critical role is centered on designing, defining requirements for, and leading the implementation of a world-class Software Development Lifecycle (SDLC) process with a paramount focus on security. Our objective is to embed security seamlessly and efficiently into every phase of development, from initial concept to deployment and beyond.

What You’ll Do

• SDLC Design and Optimization: Design, document, and champion an end-to-end Secure SDLC that aligns with industry best practices, regulatory requirements, and the specific needs of our product portfolio.
• Security Automation and Tooling: Identify, evaluate, and integrate security tools and controls (e.g., SAST, DAST, SCA, IAST, secret scanning) directly into the CI/CD pipelines to automate security gates and checks.
• Balancing Security and Velocity: Build an SDLC that maximizes developer productivity and agility while ensuring all security requirements are consistently met and verifiable.
• Requirement Definition: Translate high‑level security policies and risk management objectives into clear, actionable, and testable technical requirements for development teams.
• Developer Enablement: Develop and deliver training, guidelines, and documentation to empower developers to write secure code from the outset.
• Collaboration and Reporting: Work closely with all engineering disciplines, participate in the Platform Security team's daily operations, and support incident response and threat modeling as needed.
• Reporting Structure: Report directly to the Director of Platform Security in Gothenburg.

What You’ll Bring

• 3+ years of relevant professional experience.
• Proven background in software development, specifically in designing and implementing robust SDLC processes and CI/CD pipelines.
• Solid expertise in computer security principles.
• A strong ability to assess risks and make informed decisions.
• A keen interest in balancing security needs with developer productivity.
• Excellent communication skills and ability to build relationships across teams.

Recorded Future employees (or “Futurists”) represent over 40 nationalities and embody our core values of high standards, inclusion, and ethical action. Join us to empower clients with intelligence that disrupts adversaries.

Recorded Future is an equal‑opportunity employer and encourages candidates from all backgrounds to apply.