Application Security Specialist

Transport is at the core of modern society. Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match.

Role Purpose The Application Security Specialist helps improve application security maturity across Volvo Group by translating governance requirements into practical, usable guidance for Stable Teams. The role supports the operationalization of application security baselines, tiered requirements, and security maturity medals. It focuses on enabling teams through clear guidance, education, adoption support, and continuous improvement, rather than enforcement alone.

Mission Advance application security maturity across Digital Product teams by making security requirements clear, practical, and adoptable. Support Stable Teams in understanding their application security obligations, improving their maturity level, and applying secure-by-design practices in the way they design, build, and operate Digital Products.

Key Accountabilities Application Security Governance Enablement

• Operationalize application security baselines, tiered requirements, and maturity models across Stable Teams.
• Contribute to the development and continuous improvement of application security governance frameworks.
• Translate governance expectations into practical guidance, patterns, playbooks, and team-facing materials.
• Identify gaps in adoption and propose improvements to increase consistency, scalability, and usability.

Stable Team Enablement

• Provide clear and actionable guidance to Stable Teams on application security principles and secure design practices.
• Deliver workshops, training, and awareness activities to support adoption of application security requirements.
• Act as a trusted advisor to teams, helping them interpret requirements and apply them appropriately in context.
• Promote secure-by-design thinking through education, consultation, and continuous engagement.

Security Maturity Medals

• Support the implementation and evolution of application security maturity levels and security maturity medals.
• Help Stable Teams understand their current maturity level and the steps needed to progress.
• Contribute to maturity assessments, improvement roadmaps, and structured enablement approaches.
• Support consistent adoption of maturity expectations across teams and Digital Product areas.

Metrics & Continuous Improvement

• Contribute to defining and tracking application security KPIs, adoption metrics, and maturity progression.
• Analyze trends in governance adoption, maturity improvement, and security control implementation.
• Provide insights to improve the effectiveness of application security governance capabilities.
• Support reporting on application security posture, adoption, and maturity evolution.

DevSecOps & Golden Path Alignment

• Partner with Application Security Engineering and DevSecOps teams to align governance requirements with CI/CD, automation, and Golden Path capabilities.
• Promote security-by-default, automation, and scalable security practices.
• Help translate technical security capabilities into practical adoption guidance for Stable Teams.

Expected Outcomes

• Stable Teams clearly understand application security requirements and how to apply them.
• Application security baselines and tiered requirements are consistently adopted.
• Security maturity medals are understood and used to drive measurable improvement.
• Application security governance capabilities are practical, scalable, and continuously improved.
• Metrics provide useful insight into adoption, maturity progression, and risk reduction.
• Security governance is translated into practical outcomes that support secure-by-design delivery.

Scope of Responsibility The role contributes to the development, operationalization, and continuous improvement of application security governance capabilities. It works closely with Stable Teams, Digital Product Owners, Application Security Engineering, DevSecOps, and security governance stakeholders. The role is responsible for enabling and supporting activities related to:

• Application Security Governance
• Tiered Security Requirements
• Secure Application Design Guidance
• Security Maturity Models and Medals
• Application Security Metrics and Reporting
• Security Enablement and Training
• Application Risk Reduction

Required Skills

• 6+ years of experience in application security fundamentals, secure SDLC, and OWASP Top 10.
• Ability to translate security requirements into practical guidance for product teams.
• Experience with application security governance, baselines, controls, or maturity models.
• Good understanding of DevSecOps concepts, CI/CD, security automation, and developer workflows.
• Ability to advise engineering teams on secure-by-design practices.
• Strong communication skills, including workshops, training, playbooks, and written guidance.
• Ability to work with metrics, adoption tracking, maturity reporting, and continuous improvement.
• Risk-based mindset with the ability to prioritize based on business and product context.
• Strong stakeholder collaboration across product, engineering, DevSecOps, and security teams.
• Familiarity with frameworks such as OWASP SAMM, DSOMM, ISO 27001, or NIST is preferred.

Ready for the next move? Are you excited to bring your skills and disruptive ideas to the table? We can't wait to hear from you. Apply today! At Volvo Group, we believe in the value of in-person collaboration and connection. Our general principle is that employees work from the office. Volvo Group never requests any form of payment or fees from candidates at any stage of the recruitment process. Any such demand is a scam. To view the authentic job description and apply securely, please visit: Jobs at Volvo Group We value your data privacy and therefore do not accept applications via mail.

Who We Are And What We Believe In We are committed to shaping the future landscape of efficient, safe, and sustainable transport solutions. Fulfilling our mission creates countless career opportunities for talents across the group’s leading brands and entities. Applying to this job offers you the opportunity to join

Volvo Group . Every day, you will be working with some of the sharpest and most creative brains in our field to be able to leave our society in better shape for the next generation. We are passionate about what we do, and we thrive on teamwork. We are almost 100,000 people united around the world by a culture of care, inclusiveness, and empowerment.

Volvo Group Digital Technology & Operations (DTO) is a new division established to integrate the capabilities of VG Digital & IT and VG Connected Solutions to accelerate the digital transformation in Volvo Group. The organizational set up is structured around domains, digital products with functions for digital excellence to deliver outstanding customer experience. Joining the new DTO division means being part of a fast-moving digital product-oriented organization where teams truly own what they build from idea to delivery. In DTO, we work in agile, cross-functional teams, mastering the latest technology, and creating outstanding digital experiences that make a real difference for our colleagues and Volvo Group customers around the world. We put people first and build our culture on trust, passion, customer success, change, and performance. If you want to grow, collaborate across functions and entities, and help shape the future of digital products within Volvo Group, DTO is a great place to be.