Product & App Security Architect - Secure by Design

KONE Oyj; Espoo; On-site; EUR 110,000 - 150,000; Full time

Job summary

KONE Oyj is seeking a Product and Application Security Architect to shape the cybersecurity architecture of its products, applications, and digital services. The role spans connected control systems, cloud services, mobile apps, APIs, and IoT, with global teams and ongoing design-stage involvement.

Ideal candidates have 8+ years in cybersecurity or architecture roles, 3+ years in a lead architect position, and a strong academic background (MSc/DSc) in CS, cybersecurity, or related fields.

Qualifications

• 8+ years in cybersecurity or software/solution architecture
• 3+ years in a cybersecurity lead engineer or architect role
• MSc or DSc in relevant field
• Proven experience designing secure architectures for software products, cloud services, IoT, or cyber-physical systems
• Strong understanding of security architecture, threat modeling and secure-by-design approaches
• Experience translating business and regulatory requirements into architecture decisions
• Knowledge of secure software development practices and DevSecOps

Responsibilities

• Define and evolve security architectures, patterns and design principles for KONE products and platforms
• Conduct security architecture reviews, threat modeling and security design assessments
• Guide development teams in secure-by-design practices throughout the lifecycle
• Collaborate with architects and cybersecurity specialists to align security approaches
• Support risk assessments and mitigate cybersecurity threats and vulnerabilities
• Contribute to KONE cybersecurity standards and guardrails
• Mentor engineers on security architecture topics and promote a security culture across teams

Skills

Security architecture

Threat modeling

DevSecOps

Cloud security

Communication skills

Education

MSc or DSc in computer science / cybersecurity / electrical engineering

Tools

IEC 62443

ISO 27001

NIST CSF

Job description

KONE Oyj is seeking a Product and Application Security Architect to shape the cybersecurity architecture of its products, applications, and digital services. The role spans connected control systems, cloud services, mobile apps, APIs, and IoT, with global teams and ongoing design-stage involvement.

Ideal candidates have 8+ years in cybersecurity or architecture roles, 3+ years in a lead architect position, and a strong academic background (MSc/DSc) in CS, cybersecurity, or related fields.