Security Lead – Software Delivery
About this role
Are you passionate about improving security in software delivery and driving strategy for security by design in a critical platform area? Then this role in Orchestration Platforms might be exactly what you’re looking for.In Swedbank you have the opportunity to:
Lead and continuously evolve the security strategy for the Orchestration Platforms offering, while also driving and influencing the combined secure software delivery practices across the Software Development Lifecycle (SDLC).
Embed security into the SDLC, CI/CD, and Infrastructure as Code practices, ensuring security is built in from the start and aligned with modern engineering ways of working.
Partner with Product Owners, Tech Leads, engineers, architects, and security stakeholders to identify risks, prioritize initiatives, and drive security improvements from strategy through implementation.
Define, implement, and continuously improve security capabilities, controls, and processes, while helping teams understand gaps, measure progress, and raise their overall security maturity.
What is needed in this role:
Strong experience in application security, DevSecOps, cloud security, or similar areas, with a proven track record of embedding security into software development processes and driving security improvements from strategy to implementation (hands-on).
Technical expertise in GitHub, secure software delivery and cloud-based environments, preferably including Kubernetes. Ideally you have a background as a software engineer, preferably in Java-based environments.
Proven ability to define security roadmaps, prioritize improvements, establish meaningful security metrics, and drive measurable outcomes across engineering teams.
A pragmatic, hands-on, and delivery-focused mindset with the ability to navigate a broad security landscape, challenge existing approaches when needed, and help engineering teams implement practical and effective solutions
Strong communication skills, with the ability to
Responsibilities
- Lead and continuously evolve the security strategy for the Orchestration Platforms offering, while also driving and influencing the combined secure software delivery practices across the Software Development Lifecycle (SDLC).
- Embed security into the SDLC, CI/CD, and Infrastructure as Code practices, ensuring security is built in from the start and aligned with modern engineering ways of working.
- Partner with Product Owners, Tech Leads, engineers, architects, and security stakeholders to identify risks, prioritize initiatives, and drive security improvements from strategy through implementation.
- Define, implement, and continuously improve security capabilities, controls, and processes, while helping teams understand gaps, measure progress, and raise their overall security maturity.
- Strong experience in application security, DevSecOps, cloud security, or similar areas, with a proven track record of embedding security into software development processes and driving security improvements from strategy to implementation (hands-on).
Requirements
- Technical expertise in GitHub, secure software delivery and cloud-based environments, preferably including Kubernetes. Ideally you have a background as a software engineer, preferably in Java-based environments.
- Proven ability to define security roadmaps, prioritize improvements, establish meaningful security metrics, and drive measurable outcomes across engineering teams.
- A pragmatic, hands-on, and delivery-focused mindset with the ability to navigate a broad security landscape, challenge existing approaches when needed, and help engineering teams implement practical and effective solutions
- Strong communication skills, with the ability to