Senior Product & Application Security Architect

Kone México; Espoo; On-site; EUR 90,000 - 130,000; Full time

Job summary

KONE Cybersecurity is seeking a Product and Application Security Architect to shape the security architecture of our products, applications, and digital services. You will collaborate with architects, product owners, and development teams globally to embed secure-by-design principles from the earliest design stages.

You will translate regulatory, customer and business requirements into practical security architectures and engineering decisions, spanning cloud, APIs, IoT, and embedded systems

Qualifications

• 8+ years of experience in cybersecurity, software architecture, or related engineering.
• At least 3+ years in a cybersecurity lead engineer or architect role.
• M.Sc. or D.Sc. in computer science, cybersecurity, electrical engineering, or equivalent.
• Experience designing secure architectures for software products, cloud services, or IoT systems.
• Knowledge of threat modeling, risk-based security design, and secure-by-design practices.

Responsibilities

• Define and evolve security architectures, patterns, and design principles for products and platforms.
• Conduct security architecture reviews, threat modeling, and security design assessments.
• Guide development teams in secure-by-design practices throughout the lifecycle.
• Collaborate with architects, cloud leads, and cybersecurity specialists to standardize security approaches.
• Support security risk assessments and mitigation strategies for threats and vulnerabilities.
• Contribute to cybersecurity standards and architecture guardrails; mentor engineers on security topics.

Skills

Cybersecurity

Software architecture

Threat modeling

DevSecOps

Cloud security

IoT security

Communication

Education

M.Sc./D.Sc. in Computer Science or related field

Tools

IEC 62443

ISO 27001

NIST CSF

Job description

KONE Cybersecurity is seeking a Product and Application Security Architect to shape the security architecture of our products, applications, and digital services. You will collaborate with architects, product owners, and development teams globally to embed secure-by-design principles from the earliest design stages.

You will translate regulatory, customer and business requirements into practical security architectures and engineering decisions, spanning cloud, APIs, IoT, and embedded systems