Product and Application Security Architect (Cybersecurity)

TL;DR

Product and Application Security Architect (Cybersecurity): Designing and shaping the cybersecurity architecture for connected elevators, escalators, and building solutions with an accent on embedding security into the product lifecycle from earliest design stages. Focus on threat modeling, conducting security architecture reviews, and translating regulatory requirements like the EU Cyber Resilience Act into practical engineering decisions.

Location: Hybrid in Hyvinkää or Espoo, Finland

Company

hirify.global is a global leader providing elevators, escalators, and automatic building doors, combining physical infrastructure with smart digital systems to improve urban flow.

What you will do

• Define and evolve security architectures, patterns, and design principles for products, applications, and supporting platforms.
• Conduct security architecture reviews, threat modeling, and security design assessments for new features and technology initiatives.
• Guide development teams in implementing secure-by-design practices throughout the software and product development lifecycle.
• Collaborate with cloud architects and technical leads to drive consistent security approaches across the technology landscape.
• Support security risk assessments and help teams identify practical mitigation strategies for cybersecurity threats.
• Mentor engineers on security architecture topics and contribute to the development of cybersecurity standards and guardrails.

Requirements

• 8+ years of experience in cybersecurity, software architecture, or related engineering, with 3+ years in a lead or architect role.
• M.Sc. or D.Sc. in Computer Science, Cybersecurity, Electrical Engineering, or equivalent.
• Proven experience designing secure architectures for IoT solutions, cloud services, mobile apps, or cyber-physical systems.
• Deep understanding of threat modeling, risk-based security design, and secure-by-design approaches.
• Solid knowledge of DevSecOps, application security, and modern software delivery models.
• Familiarity with standards such as IEC 62443, ISO 27001, NIST CSF, and the EU Cyber Resilience Act.

Culture & Benefits

• Work on innovative products used by over a billion people daily.
• Flexible working conditions within a supportive global team of cybersecurity experts.
• Collaborative culture that values individual contributions and ethical business practices.
• Focus on sustainability and creating an innovative environment to achieve personal and career goals.