At Fiskars Group we are unified and driven by our common purpose: pioneering design to make the everyday extraordinary. Join our team and seize the extraordinary opportunity to influence the everyday!
We are looking for a Security Testing Engineer to join our team!
In this role, you will be responsible for driving vulnerability management coordination, prioritization, remediation, and reporting across our environment. Depending on your skillset and areas of interest, you can also contribute to extended detection and response (XDR), purple team exercises, and technical security assessments. As a Security Testing Engineer, you will maintain visibility to Threat landscape and Fiskars exposure to technical/digital risks and improve security controls with the rest of Group IT organization and stakeholders. You will also perform and coordinate security assessments and remediation activities.
Key Responsibilities
Vulnerability management: Lead the end-to-end vulnerability management process across our environment
Analyze vulnerability scan results and prioritize remediation activities based on risk, exploitability, and business impact.
Partner with IT teams to drive timely remediation.
Develop and maintain vulnerability metrics, dashboards, and reporting.
Track remediation performance and identify systemic security weaknesses.
Support vulnerability exception and risk acceptance processes.
Additional responsibilities, which can be agreed upon depending on your skillset and area of interest:
Extended Detection & Response (XDR) Monitor, investigate, and develop security controls for EDR platforms.
Analyze and develop detection capabilities against real-world attack techniques.
Support incident response investigations and containment activities.
Contribute to improving security operations (SOC) and security information and event management (SIEM)
Purple Teaming Participate in purple team exercises involving collaboration between offensive and defensive security functions.
Validate security controls and detection capabilities against real-world attack techniques.
Map findings to frameworks such as MITRE ATT&CK and recommend improvements.
Help strengthen detection engineering and security monitoring effectiveness.
Technical Security Assessments and Testing Maintain a plan for security and vulnerability assessments and exercises, perform or coordinate the execution of the plan
Execute vulnerability validation and technical verification activities.
Support penetration testing engagements and remediation verification.
Evaluate security configurations against industry standards and best practices.
Qualifications
To succeed in this position, you will have at least 5 years of IT and business/industry work experience in the cybersecurity domain.
You have direct, hands-on experience or strong working knowledge in some of these areas;
vulnerability management
managing security infrastructure
security/vulnerability assessments
digital forensics and incident response
You have knowledge of tools, technologies, and trends in the market, including vulnerability scanning and management tools; you like to stay up to date on industry best-practices, trends, and technologies.
Relevant security certifications for example OSCP, GIAC, CEH, CISSP or technology specific certifications are appreciated.
You also have experience in cyber risk management and an understanding of common vulnerabilities, attack techniques, and remediation approaches.
As a person, you have strong business acumen and business partnering skills. Your collaborative and supportive style is encouraging the organization to continually improve. You are passionate about problem solving and highly motivated and have self-starter approach to a job with a focus on delivering business value. You have strong negotiation, influencing and communication skills and you are able to adapt your interpersonal style to suit different people and situations, showing respect and sensitivity towards individual…