Security Architect

Are you passionate about designing secure products and digital services used by millions of people every day? At KONE, we combine elevators, escalators and building access solutions with cloud services, mobile applications, AI-enabled capabilities, and connected IoT systems. We are seeking a Product and Application Security Architect to join our global Cybersecurity team in a key role in ensuring that cybersecurity is built into our products and applications from the very beginning. About the role As a Product and Application Security Architect, you will shape the cybersecurity architecture of KONE's products, applications, and digital services. You will work closely with architects, product owners, and development teams globally to ensure that cybersecurity is embedded into our products from the earliest design stages and throughout their lifecycle. You will serve as a trusted security advisor for product development initiatives, helping teams translate regulatory, customer, and business requirements into practical security architectures and engineering decisions. Your work will span connected control systems, cloud services, mobile applications, APIs, and emerging technologies that enable KONE's intelligent and connected solutions. This position is located in Hyvinkää or Espoo, Finland. In this role, you will: - Define and evolve security architectures, patterns, and design principles for KONE products, applications, and supporting platforms. - Conduct security architecture reviews, threat modeling, and security design assessments for new products, features, and technology initiatives. - Guide development teams in implementing secure-by-design practices and security requirements throughout the software and product development lifecycle. - Collaborate with product architects, cloud architects, technical leads, and cybersecurity specialists to drive consistent security approaches across KONE's technology landscape. - Support security risk assessments and help teams identify practical mitigation strategies for cybersecurity threats and vulnerabilities. - Contribute to the development of KONE cybersecurity standards, secure development practices, and architecture guardrails. - Mentor engineers and development teams on security architecture topics and promote a strong security culture across product and software development organizations. What we expect from you: - 8+ years of experience in cybersecurity, software architecture, solution architecture, or related engineering disciplines, with at least 3+ years in a cybersecurity lead engineer or architect role. - M.Sc. or D.Sc. in computer science, cybersecurity, electrical engineering, or equivalent. - Proven experience in designing secure architectures for software products, cloud services, mobile applications, IoT solutions, or cyber-physical systems. - Deep understanding of security architecture principles, threat modeling, risk-based security design, and secure-by-design approaches. - Experience translating business, customer, regulatory, and security requirements into practical architecture decisions and engineering guidance. - Solid understanding of secure software development practices, DevSecOps, application security, and modern software delivery models. - Hands-on experience in one or more of the following areas: application security, cloud security, API security, mobile security, IoT security, embedded security, cryptography, or vulnerability management. - Familiarity with cybersecurity standards, frameworks, and regulations such as IEC 62443, ISO 27001, NIST CSF, and the EU Cyber Resilience Act. - Strong communication and influencing skills, with the ability to explain complex cybersecurity topics to both technical and non-technical audiences. Why join KONE Cybersecurity? We are scaling KONE's product and application security to meet the new EU CRA and global regulatory landscape, while our elevators and escalators are transforming into central platforms of smart buildings. As our offering becomes more digital, excellent cybersecurity plays a crucial role in building customer trust. We offer a chance to work with products that are used by over a billion users daily, products that are widely recognized by their quality and innovation. We respect our talented employees and offer flexible working conditions in a supportive global team of cybersecurity experts.