Security Testing Engineer

At Fiskars Group we are unified and driven by our common purpose: pioneering design to make the everyday extraordinary. We are looking for a Security Testing Engineer to join our team. In this role, you will be responsible for driving vulnerability management coordination, prioritization, remediation, and reporting across our environment. Depending on your skillset and areas of interest, you can also contribute to extended detection and response (XDR), purple team exercises, and technical security assessments. You will maintain visibility to the threat landscape and Fiskars exposure to technical/digital risks, and improve security controls with the rest of Group IT organization and stakeholders. You will also perform and coordinate security assessments and remediation activities.

Responsibilities

Lead the end-to-end vulnerability management process across the environment; Analyze vulnerability scan results and prioritize remediation based on risk, exploitability, and business impact; Partner with IT teams to drive timely remediation; Develop and maintain vulnerability metrics, dashboards, and reporting; Track remediation performance and identify systemic security weaknesses; Support vulnerability exception and risk acceptance processes; Monitor, investigate, and develop security controls for EDR platforms; Analyze and develop detection capabilities against real-world attack techniques; Support incident response investigations and containment activities; Contribute to improving SOC and SIEM; Participate in purple team exercises; Validate security controls and detection capabilities against real-world attack techniques; Map findings to frameworks such as MITRE ATT&CK and recommend improvements; Maintain a plan for security and vulnerability assessments and exercises, perform or coordinate its execution; Execute vulnerability validation and technical verification activities; Support penetration testing engagements and remediation verification; Evaluate security configurations against industry standards and best practices

Requirements

At least 5 years of IT and business/industry work experience in the cybersecurity domain; Direct, hands-on experience or strong working knowledge of vulnerability management, managing security infrastructure, security/vulnerability assessments, or digital forensics and incident response; Knowledge of tools, technologies, and trends including vulnerability scanning and management tools; Experience in cyber risk management; Understanding of common vulnerabilities, attack techniques, and remediation approaches; Strong business acumen and business partnering skills; Strong negotiation, influencing, and communication skills; Bachelor's Degree in Computer Science or a related field, or equivalent competence; English as a daily working language

Nice to have

Relevant security certifications such as OSCP, GIAC, CEH, CISSP or technology-specific certifications; Experience in extended detection and response (XDR), purple team exercises, and technical security assessments; Ability to stay up to date on industry best practices, trends, and technologies

Benefits

Competitive compensation based on industry standards and local market factors; Health and wellness programs and coverage adapted to each region; Paid time off plans and flexible work arrangements; Professional development, training programs, and learning resources; Inclusive and diverse environment; Recognition and rewards programs; Employee discounts on products across brands