CS&S Security Architect

ASML; Veldhoven; On-site; EUR 90,000 - 140,000; Full time

Job summary

ASML is seeking a CS&S Security Architect to provide architecture-level security direction across applications, AI solutions, products and services within Customer Solutions and Support. You will collaborate with capability, solution and infrastructure architects, product teams and IT to identify risks, define controls, and align improvements with business roadmaps.

This role emphasizes secure SDLC, cloud and AI security, with a mandate to embed security across roadmaps and support field

Qualifications

• Master's degree in information security, cyber security or equivalent.
• 10+ years of experience in security architecture, design and requirements collection.
• Experience coordinating security risks with business and technology stakeholders.
• Affinity with security frameworks and EU legislation including CRA and NIS 2.0.
• Ability to translate technical risks into business language and influence decisions.

Responsibilities

• Provide architecture-level security direction across applications, AI solutions, products and services.
• Evaluate designs, identify risks, define controls, and align improvements with roadmaps.
• Conduct security risk assessments and define proportionate controls for new systems.
• Ensure secure SDLC, cloud security, AI security, and product security considerations.
• Embed security into roadmaps and collaborate with CS&S architects to align activities.
• Translate findings into remediation plans and business-exposure decisions.
• Support product teams releasing solutions to field and operations teams managing critical capabilities.
• Interpret penetration tests and vulnerability findings into actionable steps.

Skills

Strong communication

Stakeholder influence

Security risk management

Security architecture

Secure SDLC

Cloud security

AI security

Business language communication

Education

Master's degree in information security or equivalent

CISSP/CCSP/ISSAP/SABSA/TOGAF or equivalent certifications

Job description

Introduction to the job Within ASML, security capabilities are organized centrally, and security risk management is embedded within each of the sectors. For Customer Solutions and Support (CS& S), we are looking for a CS &S Security Architect to further strengthen our ability to protect the confidential information of both ASML and our customers. A unique opportunity to focus on cyber security while experiencing ASMLs business and way of working.

Role and responsibilities

• Your task as CS &S Security Architect is to provide architecture-level security direction and assurance across applications, AI solutions, products and services.
• In close collaboration with Capability Architects, Solution and Infrastructure Architects, product and service teams, security experts and IT, you will evaluate solution designs, identify technical risks and security gaps, define appropriate controls, and align security improvements with business and IAS technology roadmaps.
• Architecture-level technical risk assessments, including defining proportionate controls for new applications, AI solutions, products and services.
• Secure solution design assurance, covering data flows, trust boundaries, integrations, identity, operational dependencies and residual risks.
• Strong architectural understanding of secure SDLC, application security, cloud security, AI security and product security.
• The ability to translate technical findings into business exposure, delivery choices, remediation priorities and investment decisions.
• Development of security capability and service roadmaps aligned with product portfolios, infrastructure roadmaps and IT operations.
• Engagement with CS&S infrastructure, solutions, product and operations architects to embed security consistently across their roadmaps.
• Support for both IAS product teams releasing solutions to the field and service teams operating business-critical capabilities.
• Interpretation of penetration-test, vulnerability, threat-model, code-review and compliance assessment findings into an actionable remediation plan.
• Contribution to broader operational security decisions, architecture deviations and recurring security improvement initiatives.
• Conduct Security Control Gap Assessments (Risk Scoping) for new and existing solutions to identify control deficiencies, evaluate associated risks, and ensure alignment with enterprise governance, risk, and compliance (GRC) requirements.

Education and experience

• Master's degree in information security, cyber security or equivalent.
• You prove to have at least 10+ years' experience in security architecture, design and requirements collection.
• Worked in multi-disciplinary projects; Dealt with customers.
• Deep knowledge of security technologies, architecture principles, risk management practices and industry best practices.
• Experience with security assessments and assessing security implications; Affinity with various security frameworks and current EU legislations, including CRA and NIS 2.0.
• Experience coordinating and managing information security risks in partnership with business and technology stakeholders.
• Strong ability to communicate technical risks and security requirements in business language and influence decision-making at all levels.
• Proven track record of creating, managing and delivering security roadmaps and step-ups in infrastructure, products and services.
• Experience within a high-tech, engineering or semiconductor environment is considered a strong advantage.
• Relevant certifications such as CISSP, CCSP, ISSAP, SABSA, TOGAF or equivalent are required; however, demonstrated practical experience, architectural judgement and delivery of security outcomes are valued more highly than certifications alone.

Skills

• Strong communication and listening skills
• Strong problem solving capabilities
• Ability to influence and manage different stakeholders on multiple levels
• Strong motivation on finding creative solutions for complex multi system, multiple customers problems.
• Translate security requirements and business goals into detailed specifications and designs that are accepted by stakeholders at many levels in the organizations.

Other information

As a CS&S Security Architect, you are part of the CS&S Security & Risk Management department positioned within Customer Solutions & Support and will report to the CS&S Security Lead.

You will be based in Veldhoven, the Netherlands.

You will be a member of the ASML Security community; working closely together with the security risk management teams in other sectors and the central security competence teams.

Inclusion and diversity

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that inclusion and diversity is a driving force in the success of our company.

ASML is a leading supplier of lithography equipment, used by the world's top chipmakers to print microchips that are increasingly powerful, fast and energy efficient. Working at ASML is inspiring, no matter what field you're in. That's why we push the boundaries of technology: if it's moving the world forward, chances are, we're behind it. In fact, we're probably a part of the electronic device you're using right now. We're a global team of more than 32,000 people from 122 different nationalities and counting. Headquartered in Europe's top tech hub, the Brainport Eindhoven region in the Netherlands, our operations are spread across Europe, Asia and the US.