Application Security Engineer

Help protect the technology behind some of the Nordics' most important news organisations.

At Schibsted, cybersecurity is about more than protecting systems and applications. It's also about protecting journalism, the people behind it, and the technology that makes independent news accessible to millions of people.

We're looking for an Application Security Engineer to join our cybersecurity team in Stockholm or Oslo. This is a great opportunity for someone at the beginning of their cybersecurity career who wants to develop their technical skills, gain experience across a wide range of security challenges, and work closely with developers to build safer products.

First, a little about us

Schibsted is one of the leading media groups in the Nordics, home to well-known news brands including Aftonbladet, Svenska Dagbladet, VG and Aftenposten.

Every day, millions of people turn to our news organisations to stay informed, understand the world around them, and access independent journalism.

Behind these brands is a large and diverse technology organisation, building and maintaining the digital products, platforms and infrastructure that make all of this possible.

And with that comes an interesting security challenge.

Our news brands are highly visible, and the threats we face go beyond those of a typical corporate environment. From protecting applications and user data to safeguarding journalists and ensuring uninterrupted access to news, cybersecurity plays an important role in keeping our journalism accessible and independent.

That's where you come in.

What you'll be working on

As an Application Security Engineer, you'll help strengthen the security of our applications and digital products across Schibsted.

You'll be part of a cybersecurity team working across Sweden and Norway, collaborating with developers, architects and engineering teams throughout the organisation.

A big part of your job will be identifying vulnerabilities and security risks. But finding an issue is only the beginning.

You'll also work with the teams responsible for our products to understand the problem, find practical solutions, and help make sure vulnerabilities actually get resolved.

Since Schibsted is a large organisation with many different brands, products and technologies, no two challenges will necessarily look the same. You'll have the opportunity to learn from experienced colleagues, explore different technologies and gradually take on more responsibility as you develop your skills.

Some of the things you'll do:

• Help identify and assess security vulnerabilities in our applications and digital products.

• Work directly with developers and engineering teams to understand and remediate security issues.

• Participate in security assessments and help integrate security practices throughout the software development lifecycle.

• Support teams in understanding security risks and finding practical solutions.

• Work with application security tools and contribute to improving our processes and ways of working.

• Share knowledge and collaborate with colleagues across the organisation to strengthen security awareness.

• Contribute to building a stronger security culture where security becomes a natural part of how we develop products.

Who we're looking for

You might be at the beginning of your cybersecurity career, with some hands-on experience in application security, penetration testing or a related technical field. Perhaps you've recently graduated, worked in your first security role, or developed your skills through technical projects.

What matters most to us is your technical curiosity, your willingness to learn, and your interest in understanding how applications can be made more secure.

We'd love to hear from you if you have:

• Some practical experience with application security, penetration testing or related security work, whether through employment, internships or personal projects.

• An understanding of common application vulnerabilities, such as those covered by the OWASP Top 10, and how they can be mitigated.

• Familiarity with application security testing tools, such as Burp Suite, OWASP ZAP or similar.

• A basic understanding of modern software development practices, web technologies and how applications are built.

• An interest in assessing security risks and finding practical ways to address them.

• The ability to explain technical concepts clearly and an interest in collaborating with developers and other teams.

Experience with cloud environments, infrastructure security, threat modelling or secure software development is also valuable, but not a requirement.

We're not expecting you to know everything from day one. We're looking for someone who's proactive, collaborative and eager to develop their skills. Someone who doesn't just want to identify security problems, but enjoys working with others to solve them.

Why join us?

Work that matters. The technology you help protect supports independent journalism and news organisations that play an important role in society.

Interesting security challenges. You'll work across a diverse technology landscape, with different products, engineering teams and security needs.

An opportunity to grow. You'll have the chance to learn from experienced cybersecurity colleagues, develop your technical expertise and gain hands-on experience with security challenges across a large technology organisation.

A role that combines technology and people. You'll get to dive into technical security challenges while building relationships and helping teams improve how they work.

Room to make an impact. Even early in your career, you'll have the opportunity to contribute not only to individual security improvements, but also to how we approach application security across Schibsted.

If this sounds like the kind of challenge you'd enjoy, we'd love to hear from you.