Security Engineers with a burning

commitment to DevSecOps
DNB employs Security Engineers who want to contribute to delivering on T & S
IEP Engineering Productivity's goals in Group Security's roadmap for security. Do
you have extensive experience as an application developer both on-prem and in
the cloud? Do you have a burning commitment to application security and want
to be an active advisor and leader in DevSecOps in Norway's largest bank?

DNB Technology & Services is the very heart of DNB. This is where we are
constantly developing new and future-oriented solutions for our
customers. Technology & Services provides IT services and banking production,
as well as internal group-wide services such as security, procurement and real
estate. We will ensure that both customers and employees experience that DNB
is a bank where things work, where plans become reality and ideas are put into
practice. We are in an exciting development with major changes, where we in
collaboration with some of the world's leading suppliers will create good
deliveries to our customers and users. DNB is in the process of ambitious plans
for security and is rolling out a strategic investment in all stages of IT.

The IEP Engineering Productivity section is a tech family (tribe / section) within
T&S Infrastructure and Engineering Productivity. "The Joy of Flow in Daily Work"
is our guiding star and our goal is to offer services through technical platforms
and tools that contribute to increased productivity among developers. In our
portfolio we have Atlassian product stack (Jira, Confluence, Bitbucket etc.),
Slack, SonarQube, Nexus and other CI / CD tools for Cloud and Vulcan (our
internal CI / CD platform for on-prem), and in the Engineering department
Productivity, there are now vacancies as Senior Security Engineer.

What will your work tasks be?

We are on a very exciting journey of change in terms of technology and new ways
of working, where we want you on the team to influence direction. In this
position you will, among other things:

 Be an advisor and expert in best practice around threat modeling and

security during application development, testing and management.
 Guidance on automation and safety tests in pipelines
 Contribute actively to our Security Champion community
 Conduct transformation work in collaboration with application teams
within security in the cloud
 Establish and further develop our target image for DevSecOps and
SDLC
 Influence the choice of tools and directly responsible for the
management, operation and support of the products
 Troubleshoot, correct and operate the solution together with our
partners
Engineering

 Work "hands-on" with developers to increase competence in secure

coding
 Design, develop and maintain reusable security libraries and make
them available to our development teams
 Secure our engineering platform and infrastructure as well as
contribute to continuous improvement in line with developments in
the market and coincide with a roadmap for DNB
 Experience with the use of container technology, virtualization and
"hardening" of virtual machines.
 Comfortable with working in Linux and experience with programming
languages such as Java, C # Go, Python etc
 Experience with security in cloud Amazon Web Services and / or
Microsoft Azure is a big plus.

Who are you?

We are looking for you who are curious and who like to immerse yourself in
complex issues in your daily work. You are independent while understanding the
importance of collaborating with others (business developers, customers and
business partners) to achieve results. You are also clear in your communication
with others. Furthermore, you have the following as part of your background:

 You have experience as an application developer and have been the

security champion in the team
 You have knowledge of tool integration as part of CI / CD pipelines
 You have a burning commitment to security issues and DevSecOps
 Build prototypes, templates and support materials to support security
as self-service for users
 Good scripting and programming skills in platforms, tools and
processes
 Knowledge of security in cloud platforms such as Azure and AWS
 Knowledge of security at several levels; application, container and
infrastructure such as code, CI / CD and monitoring
 SAST, DAST, Splunk and NIST are no strangers to you
 You must be able to communicate well in both Norwegian and English
(oral and written)
 You are comfortable working in a distributed developer environment
with colleagues across multiple locations (nationally and
internationally)
 You like to get acquainted with new technologies and willingly share
expertise and experience with your colleagues
 You have good knowledge of OWASP Top 10

Why should you apply?

Do you want to work in Norway's most innovative business? In 2020, DNB was
named Norway's most innovative company, which means that over 2 million
private and corporate customers get access to modern and future-oriented digital
banking solutions every single day! Are you passionate about the same as us -
creating fantastic customer experiences through smooth processes and
profitable services? Do you want to work in a team with other enthusiastic and
committed colleagues, who love to share their knowledge and experiences with
each other? Then you should seize this unique opportunity to work at DNB.

What we can offer you:

In addition to competitive terms, we have a strong engineering culture. We are

constantly using new technology and the position therefore provides good
opportunities for professional development. We have a good working environment
in fantastic premises, centrally in Bjørvika in Oslo and Solheimsviken in Bergen,
at the same time we have good solutions for working remotely.

We offer one of Norway's best pension terms and insurance schemes, as well as
employees' terms on loans, savings, shares, etc. through Personnel Bank. We
have flexible working hours, extra days off and reduced working hours from May
to August (summer time). On weekends and holidays, you get access to cabins
and fisherman's cabins scattered throughout Norway and in holiday homes
abroad. We have sporting, cultural and other activities plus a wide range of
discount schemes.

Knowledge and experience are our most important resources. You get great
opportunities to participate in conferences and courses, both to build your own
competence and to represent DNB externally.