Application Security Specialist

Responsibilities

• Operationalize application security baselines, tiered requirements, and maturity models across Stable Teams.
• Translate governance expectations into practical guidance, patterns, playbooks, and team-facing materials.
• Provide actionable guidance to teams on application security principles and secure design practices.
• Deliver workshops, training, and awareness activities to support the adoption of security requirements.
• Partner with Application Security Engineering and DevSecOps teams to align requirements with CI/CD and automation.
• Define and track application security KPIs, adoption metrics, and maturity progression.

Requirements

• 6+ years of experience in application security fundamentals, secure SDLC, and OWASP Top 10.
• Proven ability to translate complex security requirements into practical guidance for product teams.
• Strong understanding of DevSecOps concepts, CI/CD, security automation, and developer workflows.
• Experience with application security governance, baselines, controls, or maturity models.
• Excellent communication skills for conducting workshops, creating playbooks, and providing written guidance.
• Strong stakeholder collaboration skills across product, engineering, and security teams.
• Risk-based mindset with the ability to prioritize based on business and product context.

Preferred Qualifications

• Familiarity with security frameworks such as OWASP SAMM, DSOMM, ISO 27001, or NIST.

About the Company

Volvo Group is committed to shaping the future landscape of efficient, safe, and sustainable transport solutions. Our Digital Technology & Operations (DTO) division integrates digital capabilities to accelerate transformation through agile, cross-functional teams. We work with next-gen technologies to create outstanding digital experiences that make a real difference for our customers and society.