Product Security Lead

Security is key to Nokia products and services. Nokia Networks implements seamless security in its portfolio of products and services. Mobile Networks and BaseBand Platform teams implement Nokia security and privacy vision ensuring that their products satisfy high customer expectations and requirements.

This Job offers you a leadership opportunity to solve complex security issues and help Nokia realize its product security excellence vision. As PSL you will be responsible for ensuring that security and privacy is implemented in a product line. You will lead DFSEC implementation activities for a product line, implement proactive and reactive security process. You will work with a cross functional and virtual team of security experts which consist of system architects, test and development leads, security mangers as well as product and program managers.

• ensure that Design for Security & Privacy methodology is being followed
• ensure that Security Vulnerability Monitoring process (SVM) is being used
• evaluate product security compliance with Nokia DFSEC
• to increase security awareness in the respective product
• to support in RFI/RFQ/RFP tendering process
• ensure that needed reporting is done for compliancy status
• lead and contribute to security incident response, root cause analysis
• automation and productivity improvement for DFSEC governance and DevOps

• Master’s or Bachelor’s degree in Engineering, Telecommunications, Computer Science or Software Technology or equivalent education
• good understanding of product security standards including system/software/application security
• knowledge of current communications industry, cyber security, IP networks, system engineering, quality/security standards and frameworks
• knowledge of TCP/IP services/protocols, networking, emerging technology trends and system integration
• strong interest and knowledge of emerging technologies and solutions
• understanding of mobile networks technology and architecture
• demonstrated skills in two or more areas listed below:

• network and application security architectures

• predictive and reactive security solutions

• security auditing and risk analysis

• security analytics tools and industry best practices

• ability to analyze product or solution security status from testing results, reports, architecture and audit results
• security certifications (CISSP, ethical hacker, or others security related)
• excellent communication and documentation abilities
• good communication in English (both written and spoken)