CS&S Security Architect

ASML Berlin GmbH; Netherlands; On-site; EUR 120,000 - 150,000; Full time

Job summary

ASML seeks a CS&S Security Architect to provide architecture-level security direction across applications, AI solutions, products and services. You will evaluate designs, define controls and embed security across roadmaps, collaborating with capability and infrastructure architects to mitigate risks.

Based in the Netherlands (Veldhoven), you will translate technical risks into business priorities, develop security capabilities, and support release with field and service teams.

Qualifications

• Master's degree in information security or cyber security.
• 10+ years of experience in security architecture, design and requirements collection.
• Worked in multi-disciplinary projects and dealt with customers.
• Deep knowledge of security technologies, architecture principles, risk management practices and industry best practices.
• Experience with security assessments and assessing security implications; familiarity with EU regulations (CRA and NIS 2.0).
• Experience coordinating and managing information security risks with business and technology stakeholders.
• Strong ability to communicate technical risks and security requirements in business language and influence decisions at all levels.
• Proven track record of creating and delivering security roadmaps and infrastructure/product/service improvements.
• Experience in high-tech, engineering or semiconductor environments is advantageous.
• Relevant certifications such as CISSP/CCSP/ISSAP/SABSA/TOGAF or equivalent.

Responsibilities

• Provide architecture-level security direction and assurance across apps, AI solutions, products and services.
• Evaluate solution designs, identify risks and security gaps, define controls and align with roadmaps.
• Translate technical findings into business exposure, delivery choices and remediation priorities.
• Develop security capability and service roadmaps aligned with portfolios and IT operations.
• Engage with CS&S infrastructure, solutions, product and operations architects to embed security across roadmaps.
• Support IAS product teams releasing solutions to the field and service teams operating critical capabilities.
• Interpret penetration tests, vulnerability, threat models, code reviews into remediation plans.
• Contribute to broader security decisions, architecture deviations and improvement initiatives.
• Conduct Security Control Gap Assessments for new and existing solutions aligning with GRC requirements.

Skills

Communication

Problem solving

Stakeholder management

Security mindset

Requirements translation

Education

Master's degree in information security

CISSP

TOGAF or equivalent

Job description

Introduction to the job

Within ASML, security capabilities are organized centrally, and security risk management is embedded within each of the sectors. For Customer Solutions and Support (CS&S), we are looking for aCS &S Security Architect to further strengthen our ability to protect the confidential information of both ASML and our customers. A unique opportunity to focus oncybersecurity while experiencing ASMLs business and way of working.

Role and responsibilities

Your task as CS &S Security Architect is to provide architecture-level security direction and assurance across applications, AI solutions,productsand services. In close collaboration with Capability Architects, Solution and Infrastructure Architects, product and service teams, securityexpertsand IT, you will evaluate solution designs,identifytechnical risks and security gaps, defineappropriate controls, and align security improvements with business andIAStechnology roadmaps. This means:

• Architecture-level technical risk assessments, including defining proportionate controls for new applications, AI solutions, products and services.


• Secure solution design assurance, covering data flows, trust boundaries, integrations, identity, operational dependencies and residual risks.


• Strong architectural understanding ofsecure SDLC, application security, cloud security, AI security and product security.


• The ability to translate technical findings intobusiness exposure, delivery choices, remediation priorities and investment decisions.


• Development ofsecurity capability and service roadmapsaligned with product portfolios, infrastructure roadmaps and IT operations.


• Engagement with CS&S infrastructure, solutions, product and operations architects to embed security consistently across their roadmaps.


• Support for both IASproduct teams releasing solutions to the fieldandservice teams operating business-critical capabilities.


• Interpretation of penetration-test, vulnerability, threat-model, code-review and compliance assessment findings into an actionable remediation plan.


• Contribution to broader operational security decisions, architecture deviations and recurring security improvement initiatives.


• Conduct Security Control Gap Assessments (Risk Scoping) for newand existing solutions toidentifycontrol deficiencies, evaluate associated risks, and ensure alignment with enterprise governance, risk, and compliance (GRC) requirements.

Education and experience

• Master's degree in information security, cyber securityor equivalent.


• Youprove tohave at least10+years’ experienceinsecurityarchitecture,designand requirements collection.


• Worked in multi-disciplinary projects; Dealt with customers.


• Deep knowledge of security technologies, architecture principles, risk management practices and industry best practices.


• Experience with security assessments and assessing security implications; Affinity with various security frameworks and current EU legislations, including CRA and NIS 2.0.


• Experience coordinating and managing information security risks in partnership with business and technology stakeholders.


• Strong ability to communicate technical risks and security requirements in business language and influence decision-making at all levels.


• Proven track record of creating, managing and delivering security roadmaps and step-ups in infrastructure, products and services.


• Experience within a high-tech, engineering or semiconductor environment is considered a strong advantage.


• Relevant certifications such as CISSP, CCSP, ISSAP, SABSA, TOGAF or equivalent are required; however, demonstrated practical experience, architectural judgement and delivery of security outcomes are valued more highly than certifications alone.

Skills

• Strong communication and listening skills


• Strong problem solving capabilities


• Ability to influence and manage different stakeholders on multiple levels


• Strong motivation on finding creative solutions for complexmultisystem, multiplecustomersproblems.


• Translatesecurityrequirements and business goals intodetailedspecifications and designsthat areaccepted by stakeholders at many levels in theorganizations.

Other information

Asa CS&S Security Architect,you are part of the CS&S Security & Risk Management department positioned within Customer Solutions & Support and will report to theCS&S Security Lead.

You will be based in Veldhoven, the Netherlands. You will be a member of the ASML Securitycommunity;working closely together with the security risk management teams in other sectors and the central security competence teams.

Inclusion and diversity

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that inclusion and diversity is a driving force in the success of our company.