Software Security Engineer

<p><b>Join the future of Warehouse Automation!</b></p><p></p><p>We’re looking for <b>a </b>Senior Software Security Lead to <b>help elevate the security posture of our software engineering organization</b>. As part of our platform team, an <b>enabling</b> group that partners across product teams, you’ll make secure development simple, consistent, and effective.</p><p></p><p>You’ll play a key role in <b>educating, guiding, and empowering developers</b> to build secure applications, not by policing, but by enabling. You’ll <b>maintain and evolve our Secure Software Development Lifecycle (SSDLC),</b> drive adoption of best practices, and work closely with engineering leaders to continuously improve our maturity. This is a great opportunity for someone with a solid software development background who’s passionate about security and eager to make a broad organizational impact.</p><p></p><p><b>Job Responsibilities:</b></p><ul><li><p><b>Own and evolve our Secure Software Development Lifecycle</b> (SSDLC), ensuring it’s practical, current, and well-adopted across teams.</p></li><li><p><b>Partner with product engineering teams</b> to assess and improve their security maturity, including leading or supporting threat modelling as part of the SSDLC to identify and mitigate risks.</p></li><li><p><b>Collaborate with DevOps and platform engineering</b> to integrate effective security tools and checks into the CI/CD pipeline.</p></li><li><p><b>Select, evaluate, and maintain security tools</b> used in development and testing (e.g., SCA, SAST, DAST).</p></li><li><p><b>Promote secure development habits</b> through knowledge sharing, training programs, and by ensuring processes and documentation support audits and a strong security posture.</p></li></ul><p></p><p><b>Qualifications:</b></p><ul><li><p>Solid foundation in software development and modern engineering practices (CI/CD, code review, testing, etc.), with a<b> minimum of 5+ years in software development and 2+ years in security</b>.</p></li><li><p><b>Experience in enablement or advisory roles</b> (e.g., developer advocate, platform engineer, AppSec partner) and a collaborative mindset to drive secure development practices.</p></li><li><p>Good understanding of <b>application security principles</b>, secure coding standards, and vulnerability management.</p></li><li><p><b>Hands-on experience with secure development</b> tooling (e.g., Aikido, Snyk, opengrep, Renovate, OWASP ZAP, Trivy, etc.).</p></li><li><p><b>Familiarity with security and compliance frameworks</b> such as OWASP SAMM, NIST CSF, the Cyber Resilience Act, or ISO 27001.</p></li></ul><p></p><p><b>We offer: </b></p><ul><li><p>A <b>Collaborative &amp; Inclusive Culture</b> where we celebrate and value everyone’s contributions, encouraging diverse perspectives in decision-making.</p></li><li><p><b>Work-Life Balance &amp; Well-being</b>: We offer 1 hour per week of paid exercise, health insurance, and a generous pension plan, prioritizing your mental and physical well-being.</p></li><li><p><b>A Creative and Safe Workplace</b> by joining a company experiencing rapid growth, with the stability of being Norway’s first unicorn listed on the Oslo Stock Exchange.</p></li><li><p><b>International and Supportive Environment within a Norwegian multinational</b> that values collaboration and innovation with a structured onboarding plan and career opportunities within the company</p></li></ul><p></p><p><b>Location for this role is either in Oslo (Lysaker) or Stavanger. </b></p><p></p><p><b>Application deadline: December 11th</b>. Please note that we review applications continuously—if this opportunity excites you, we encourage you to apply as early as possible! All inquiries are treated confidentially.</p><p></p><p><i>AutoStore does not accept agency resumes or assistance for this role. Please do not forward resumes to our job's alias or AutoStore employees. AutoStore is not responsible for any fees related to unsolicited resumes. This policy should be respected.</i></p>