5G Core Product Security Lead

In Cloud and Network Services, technology leadership drives our business strategy. Our team focuses on delivering cloud-based network services to communication service providers, web-scalers, and enterprise customers.

The Nokia Cloud Mobile Gateway (CMG) goes beyond network virtualization with an optimized cloud-native software design that supports the evolution of advanced 4G, IoT/MTC and 5G services. It delivers the high performance and subscriber scalability to address the growth in users, devices and applications, and the associated demands for high bandwidth and lower latency. The CMG supports multiaccess connectivity by converging multiple mobile gateway functions onto a single, general-purpose computing platform while offering multiple configuration options that provide deployment flexibility.

 

We are looking for a Product Security Lead to join our P&E Security Eng team to define and implement security strategies, policies, and standards across our product line. In this role, you will work closely with engineering, DevOps, and compliance teams to ensure security is integrated throughout the software development lifecycle (SDLC). Your expertise will help protect our product from evolving cyber threats while ensuring compliance with all Nokia best practices and security standards.

Responsibilities:

• Design, Develop, and release Security Hardening Solutions; leading the strategy and document the following technical specifications, per release:
  • Security Architecture Specification
  • Security Threat and Risk Analysis
  • Hardening Specification
  • Security Test reports
• Work with the Program and Product Managers to ensure that product meets Nokia DFSEC (Design for Security) requirements.
• Work with the PLM’s in supporting Customer facing Security Issues.
• Work with 3rd Party Auditors for supporting NESAS evaluation of the product. 
• Perform daily software vulnerability assessments using the following tools: Tenable, Anchore, Black Duck Hub, Xray and VAMS. Use the Common Vulnerability Scoring System for each of the vulnerabilities identified in the product.
• Work with the R&D team to provide software patches which reduce the number of vulnerabilities within the product
• Closely work with Nokia Common Software Foundation team in order to resolve existing vulnerabilities and security issues. 
• Involved with Security testing activities (port scanning, vulnerability and malware scanning, compliance testing, fuzz and flood testing , etc) and report analysis.
• Make sure that all software components respect Nokia legal requirements.
• Guide development teams in implementing secure coding practices, secure design principles, and code review processes.
• Develop tools and frameworks to automate security testing in CI/CD pipelines.

Must Have:

• Bachelor´s degree required (Masters/PhD preferred) in a technical field (Computer Science, Electrical Engineering, etc.). Any certification in security area is an asset
• Minimum of 8 years of experience in software development or testing within Telecommunications Networks, with expertise in cloud-native design.
• Strong knowledge in Network Security, in design for security and privacy requirements (e.g. GDPR, etc.) and in Docker, OpenStack, Kubernetes and Containerized Applications. In addition, working knowledge on secure protocols (TLS/DTLS/SSH ), Encryption methodology, Ciphers etc.
• Experience in security tools and technologies
• Strong customer focus, written and oral communication skills, interpersonal/team skills and presentation skills

Nice to have

• Ability to work across multi-national, fast-paced environment 
• Self-starter - able to demonstrate strong sense of business ownership and leadership
• Entrepreneurial spirit and sense of personal responsibility

 

Benefits: 

• We provide a comprehensive private life and medical insurance plan to safeguard your well-being and that of your family.
• As part of our commitment to your health, we offer an annual medical check-up program.
• We offer a pension plan to help you plan for your future and ensure financial security after retirement.
• Enjoy the convenience of a ticket restaurant e-card, which can be used at various restaurants and eateries according to our policy (currently at €120 monthly)
• You will be provided with a company mobile device and subscription to stay connected and efficient in your work.
• We offer company bus transportation to facilitate your daily commute to and from work.
• Benefit from flexible working hours and the option to work in a hybrid or remote mode, providing a better work-life balance.
• Receive a one-time payment of €350 as cash support for hybrid or remote mode arrangements.
• Take advantage of our Personal Support Service, which provides confidential and professional support and guidance on a range of emotional, practical, and work-life topics.
• Participate in Nokia's voluntary employee share purchase plan, allowing you to share in the company's success.
• Our Employee Recognition program, "Everyday Excellence," acknowledges and rewards outstanding contributions. You can redeem awards through our online store.
• Earn a generous referral bonus of €2.000, one of the highest in the market, for referring qualified candidates to join our team.
• Enjoy 90 calendar days of paid leave for the arrival of a new child.
• Engage in social clubs and cultural activities organized by the company to foster a sense of community and well-being.
• E-Learning Platforms: Access renowned e-learning platforms such as NokiaEDU, Harvard ManageMentor, and LinkedIn Learning for technical training and personal development.
• We provide ample opportunities for career growth and development, including training programs and mentorship initiatives.

Come create the technology that helps the world act together

Nokia is committed to innovation and technology leadership across mobile, fixed and cloud networks. Your career here will have a positive impact on people’s lives and will help us build the capabilities needed for a more productive, sustainable, and inclusive world.
We challenge ourselves to create an inclusive way of working where we are open to new ideas, empowered to take risks and fearless to bring our authentic selves to work

What we offer
 
Nokia offers continuous learning opportunities, well-being programs to support you mentally and physically, opportunities to join and get supported by employee resource groups, mentoring programs and highly diverse teams with an inclusive culture where people thrive and are empowered.

Nokia is committed to inclusion and is an equal opportunity employer

Nokia has received the following recognitions for its commitment to inclusion & equality:

• One of the World’s Most Ethical Companies by Ethisphere
• Gender-Equality Index by Bloomberg
• Workplace Pride Global Benchmark

At Nokia, we act inclusively and respect the uniqueness of people. Nokia’s employment decisions are made regardless of race, color, national or ethnic origin, religion, gender, sexual orientation, gender identity or expression, age, marital status, disability, protected veteran status or other characteristics protected by law.
We are committed to a culture of inclusion built upon our core value of respect.

Join us and be part of a company where you will feel included and empowered to succeed.