Product Security Specialist

Join Nokia’s Autonomous Networks engineering team building a next-generation Core Network Management System that helps telecom operators monitor, diagnose and troubleshoot networks, proactively identify issues, perform automated Root Cause Analysis (RCA) and provide remediation recommendations to reduce MTTR. The cloud-native platform processes massive-scale network data using Kubernetes/OpenShift, microservices, AI/ML, Agentic AI and data analytics. The technology stack includes Linux, Golang, OpenTelemetry, ReactJS, ClickHouse, VictoriaMetrics, Kafka, Coral and Ginkgo/Gomega. As a Product Security Specialist, you will be responsible for driving product security through threat modeling, secure design reviews, vulnerability management, security testing, and DevSecOps practices. The specialist will collaborate with Engineering, Architecture, Product Security Managers to identify risks, drive remediation, strengthen the product security posture, and ensure compliance with customer and industry security requirements. You Have: Engineering degree with 8+ years of relevant experience. Strong expertise in Product Security and the Secure Software Development Lifecycle (SSDLC), including threat modeling, secure architecture and design reviews, risk assessments, threat analysis, and security-by-design practices for cloud-native products. Hands-on experience securing Kubernetes, OpenShift, containers, microservices, APIs, service mesh, IAM/RBAC, secrets management, and cloud-native platforms. Strong knowledge of Application Security and DevSecOps, including OWASP Top 10, secure coding practices, SAST, DAST, SCA, container security, dependency scanning, Infrastructure as Code (IaC) security, and CI/CD security automation. Proven experience in vulnerability management, including CVE/CVSS assessment, security advisories, remediation planning, risk prioritization, root cause analysis, and closure of security findings across products in development and production. Experience securing large-scale distributed data, observability, and telemetry platforms leveraging technologies such as Kafka, ClickHouse, VictoriaMetrics, MariaDB, OpenTelemetry, OTLP, and microservices-based architectures. Strong understanding of authentication, authorization, PKI, encryption, certificate management, API security, network security, zero-trust architecture, and security compliance frameworks. Knowledge of telecom security, OAM/FCAPS, 4G/5G Core Networks, SNMP, and 3GPP security standards for carrier-grade network management and observability solutions. Proven ability to drive product security strategy, collaborate with engineering and architecture teams, leverage AI-powered security analysis and automation tools, and support compliance with customer, regulatory, and industry security requirements. Nice to Have: Professional certifications such as Certified Kubernetes Security Specialist (CKS), CISSP, CCSP, CSSLP, GIAC (GSEC/GPEN/GCSA), or equivalent security certifications. Prior experience as a Scrum Master.