Product and Application Security Architect

KONE Oyj; Espoo; On-site; EUR 110,000 - 150,000; Full time

Job summary

KONE Oyj is seeking a Product and Application Security Architect to shape the cybersecurity architecture of its products, applications, and digital services. The role spans connected control systems, cloud services, mobile apps, APIs, and IoT, with global teams and ongoing design-stage involvement.

Ideal candidates have 8+ years in cybersecurity or architecture roles, 3+ years in a lead architect position, and a strong academic background (MSc/DSc) in CS, cybersecurity, or related fields.

Qualifications

• 8+ years in cybersecurity or software/solution architecture
• 3+ years in a cybersecurity lead engineer or architect role
• MSc or DSc in relevant field
• Proven experience designing secure architectures for software products, cloud services, IoT, or cyber-physical systems
• Strong understanding of security architecture, threat modeling and secure-by-design approaches
• Experience translating business and regulatory requirements into architecture decisions
• Knowledge of secure software development practices and DevSecOps

Responsibilities

• Define and evolve security architectures, patterns and design principles for KONE products and platforms
• Conduct security architecture reviews, threat modeling and security design assessments
• Guide development teams in secure-by-design practices throughout the lifecycle
• Collaborate with architects and cybersecurity specialists to align security approaches
• Support risk assessments and mitigate cybersecurity threats and vulnerabilities
• Contribute to KONE cybersecurity standards and guardrails
• Mentor engineers on security architecture topics and promote a security culture across teams

Skills

Security architecture

Threat modeling

DevSecOps

Cloud security

Communication skills

Education

MSc or DSc in computer science / cybersecurity / electrical engineering

Tools

IEC 62443

ISO 27001

NIST CSF

Job description

Are you passionate about designing secure products and digital services used by millions of people every day? At KONE, we combine elevators, escalators and building access solutions with cloud services, mobile applications, AI-enabled capabilities, and connected IoT systems. We are seeking a Product and Application Security Architect to join our global Cybersecurity team in a key role in ensuring that cybersecurity is built into our products and applications from the very beginning.

About the role

As a Product and Application Security Architect, you will shape the cybersecurity architecture of KONE's products, applications, and digital services. You will work closely with architects, product owners, and development teams globally to ensure that cybersecurity is embedded into our products from the earliest design stages and throughout their lifecycle. You will serve as a trusted security advisor for product development initiatives, helping teams translate regulatory, customer, and business requirements into practical security architectures and engineering decisions. Your work will span connected control systems, cloud services, mobile applications, APIs, and emerging technologies that enable KONE's intelligent and connected solutions. This position is located in Hyvinkää or Espoo, Finland.

In this role, you will:

• Define and evolve security architectures, patterns, and design principles for KONE products, applications, and supporting platforms.
• Conduct security architecture reviews, threat modeling, and security design assessments for new products, features, and technology initiatives.
• Guide development teams in implementing secure-by-design practices and security requirements throughout the software and product development lifecycle.
• Collaborate with product architects, cloud architects, technical leads, and cybersecurity specialists to drive consistent security approaches across KONE's technology landscape.
• Support security risk assessments and help teams identify practical mitigation strategies for cybersecurity threats and vulnerabilities.
• Contribute to the development of KONE cybersecurity standards, secure development practices, and architecture guardrails.
• Mentor engineers and development teams on security architecture topics and promote a strong security culture across product and software development organizations.

What we expect from you:

• 8+ years of experience in cybersecurity, software architecture, solution architecture, or related engineering disciplines, with at least 3+ years in a cybersecurity lead engineer or architect role.
• M.Sc. or D.Sc. in computer science, cybersecurity, electrical engineering, or equivalent.
• Proven experience in designing secure architectures for software products, cloud services, mobile applications, IoT solutions, or cyber-physical systems.
• Deep understanding of security architecture principles, threat modeling, risk-based security design, and secure-by-design approaches.
• Experience translating business, customer, regulatory, and security requirements into practical architecture decisions and engineering guidance.
• Solid understanding of secure software development practices, DevSecOps, application security, and modern software delivery models.
• Hands-on experience in one or more of the following areas: application security, cloud security, API security, mobile security, IoT security, embedded security, cryptography, or vulnerability management.
• Familiarity with cybersecurity standards, frameworks, and regulations such as IEC 62443, ISO 27001, NIST CSF, and the EU Cyber Resilience Act.
• Strong communication and influencing skills, with the ability to explain complex cybersecurity topics to both technical and non-technical audiences.

Why join KONE Cybersecurity?

We are scaling KONE's product and application security to meet the new EU CRA and global regulatory landscape, while our elevators and escalators are transforming into central platforms of smart buildings. As our offering becomes more digital, excellent cybersecurity plays a crucial role in building customer trust.

We offer a chance to work with products that are used by over a billion users daily, products that are widely recognized by their quality and innovation. We respect our talented employees and offer flexible working conditions in a supportive global team of cybersecurity experts.

8+ years of experience in cybersecurity, software architecture, solution architecture, or related engineering disciplines, At Least 3+ years in a cybersecurity lead engineer or architect role, M.Sc. or D.Sc. in computer science, cybersecurity, electrical engineering, or equivalent, Proven experience in designing secure architectures for software products, cloud services, mobile applications, IoT solutions, or cyber-physical systems, Deep understanding of security architecture principles, threat modeling, risk-based security design, and secure-by-design approaches, Experience translating business, customer, regulatory, and security requirements into practical architecture decisions, Solid understanding of secure software development practices, DevSecOps, application security, and modern software delivery models, Hands-on experience in application security, cloud security, API security, mobile security, IoT security, embedded security, cryptography, or vulnerability management, Familiarity with cybersecurity standards and regulations such as IEC 62443, ISO 27001, NIST CSF, and the EU Cyber Resilience Act, Strong communication and influencing skills