Product Security Leader

Job Description

This role in the CNS S&C (Services & Care) Autonomous Network Domain Delivery Unit (DDU) offers you to bring your experience in software development or testing within Telecommunications Networks (cloud-native design and development). You will guide a passionate team of architects and engineers focused on vulnerability assessment and penetration testing, playing a key role in making our products more secure and resilient. With your experience in leading technical teams, and your knowledge of security architecture and services, you will thrive in this role.

If you're looking for a role where your experience is valued, your guidance makes a difference, and you can help define how a global team thinks about security, let’s talk.

How You Will Contribute And What You Will Learn

• Drive and mentor a diverse security team while driving initiatives around vulnerability management, penetration testing, and overall product security.
• Apply advanced knowledge of security architecture, secure design principles, and compliance with best practices and regulatory standards.
• Conduct vulnerability assessments, CVE and impact analysis, and hands-on testing using tools such as VAMS, Tenable, Black Duck, and more.
• Ensure secure-by-design practices with a solid focus on privacy, incorporating secure protocols (TLS/DTLS/SSH), encryption methods, and cipher management.
• Manage product-level threat and risk analysis, SOC coordination, and security hardening activities across cloud, containerized, and DevOps environments.
• Prepare detailed security test reports, evidence, and documentation aligned with milestones like C3/C5, and contribute to RFI/RFQ/RFP processes as needed.
• Bring experience with Secure DevOps, knowledge of SAFe agile methodologies, and optionally, hold relevant certifications in security management.
  
  

Key Skills And Experience

You have:

• 12+ years of experience in software development or testing within Telecommunications Networks, and practical experience in cloud-native design and development with Engineering or an equivalent degree.
• Practical experience of mentoring and guiding technical teams in a product security or related domain
• Understanding of security architecture within software products
• Hands-on experience with vulnerability assessment, management, CVE analysis, and impact evaluation
• Experience with vulnerability management tools (e.g., VAMS or similar platforms)
  
  

It would be nice if you also had:

• Ability to manage and support security and privacy aspects of products, ensuring alignment with compliance and best practices
• Drove the validation on telecom security topics and assessing their impact on products or feature areas
• Ease of interfacing with customer teams, product management, and internal feature teams to drive secure development practices
  
  

About Us

Come create the technology that helps the world act together

Nokia is committed to innovation and technology leadership across mobile, fixed and cloud networks. Your career here will have a positive impact on people’s lives and will help us build the capabilities needed for a more productive, sustainable, and inclusive world.

We challenge ourselves to create an inclusive way of working where we are open to new ideas, empowered to take risks and fearless to bring our authentic selves to work

What we offer

Nokia offers continuous learning opportunities, well-being programs to support you mentally and physically, opportunities to join and get supported by employee resource groups, mentoring programs and highly diverse teams with an inclusive culture where people thrive and are empowered.

Nokia is committed to inclusion and is an equal opportunity employer

Nokia has received the following recognitions for its commitment to inclusion & equality:

• One of the World’s Most Ethical Companies by Ethisphere
• Gender-Equality Index by Bloomberg
• Workplace Pride Global Benchmark
  
  

At Nokia, we act inclusively and respect the uniqueness of people. Nokia’s employment decisions are made regardless of race, color, national or ethnic origin, religion, gender, sexual orientation, gender identity or expression, age, marital status, disability, protected veteran status or other characteristics protected by law.

We are committed to a culture of inclusion built upon our core value of respect.

Join us and be part of a company where you will feel included and empowered to succeed.

About The Team

As Nokia's growth engine, we create value for communication service providers and enterprise customers by leading the transition to cloud-native software and as-a-service delivery models. Our inclusive team of dreamers, doers and disruptors push the limits from impossible to possible.