Security Engineering at Sportradar, Trondheim

About the job

Sportradar AS is looking for a Security Engineering professional to join their team in Trondheim. This role involves integrating security into the software development lifecycle, from secure design and threat modelling to security reviews. The position will also include implementing security checks in CI/CD pipelines, securing cloud and Kubernetes environments, and managing vulnerabilities based on risk.

Responsibilities:

• Ensure security is a core part of how engineers build software.
• Implement security checks in CI/CD pipelines (SAST, DAST, software composition analysis, infrastructure-as-code scanning, and supply chain security).
• Work with Platform Engineering to secure cloud and Kubernetes environments.
• Run vulnerability management based on risk, from identifying issues to ensuring fixes are deployed.
• Support engineering teams in building securely, including when using AI coding tools.
• Act as the go-to person for security questions and provide actionable answers.
• Lead the DevSecOps Security Engineer role, staying hands-on and setting technical standards.
• Lead the Senior Manager, Information Security Engineering role, including strategy, hiring, and performance management, while staying close to technical work.

About you

You enjoy security when it helps engineers deliver high-quality software, not when it hinders them. You work well with engineers, explaining the 'why' and then helping fix things. You are a continuous learner and value getting things done in a global company.

Requirements:

• Experience in DevSecOps, security engineering, application security, or cloud security.
• Good knowledge of CI/CD and modern development practices.
• Experience securing cloud-native environments, preferably AWS, and working with Kubernetes and containers.
• Solid understanding of vulnerability management and the OWASP Top 10.
• Experience working with engineering teams as an adviser and enabler.
• Clear, confident communication in fluent English.
• For the Senior Manager route: experience leading engineers, setting direction, running hiring, and managing performance.

Preferred skills:

• CSPM or KSPM tooling
• AWS and GCP security
• GitLab Ultimate
• Infrastructure as code
• Large enterprise experience
• Security certifications

What we offer:

• A collaborative environment with colleagues from around the world.
• Flexibility to manage your workday and tasks with autonomy.
• A balance of structure and autonomy to tackle daily tasks.
• A vibrant and inclusive community, including Women in Tech and Pride groups.
• Global Employee Assistance Programme.
• Calm and Reulay app for well-being support.
• Online training videos.
• Flexible working hours.
• Hybrid work model with five days in the office per week.

Application process:

• Initial Screening: A quick chat with our Talent Acquisition Partner.
• Two technical interviews: Meet with the Technical team and Hiring Manager.
• Final Steps: Receive feedback and, if successful, an offer.

Additional information:

• Sportradar is committed to equal access and opportunities for all qualified applicants.
• We encourage applications even if you don't meet all the requirements.

Application instructions: In your application, add a few lines on which route suits you better: Lead DevSecOps Engineer or Senior Manager (leading a team while staying hands-on). If you are open to either, say so.