Customer Solutions Architect

As a Customer Solutions Architect at Nokia, you'll be at the forefront of identifying and addressing emerging security vulnerabilities, utilizing the Security Vulnerability Management (SVM) process. Collaborate closely with our talented software architects and R&D teams, ensuring critical remediations are effectively implemented. Youll negotiate directly with customer teams to align on alternative security measures and conduct essential network security audits.

HOW YOU WILL CONTRIBUTE AND WHAT YOU WILL LEARN

• Assess emerging security vulnerabilities following the Security Vulnerability Management process, provide applicable workarounds and determine the need for security vulnerability fixes. Work closely with software architects and software R&D teams to analyze vulnerabilities and/or suggest remediations.
• Co-ordination with product line for mitigation plans for the identified vulnerabilities.
• Ability to work together with product management to provide impact analysis for the security requirements at the Org level.
• Working on initiatives to design, develop, and implement security solutions to meet business and compliance requirements.
• Negotiating with customer teams & aligning for alternate security control measures as relevant.
• Deep understanding of privacy principles, GDPR and best practices for securing deployment.
• Influence product roadmaps to include relevant security and privacy features.
• Technical knowledge and analysis of information assurance, to include applications, operating systems, physical security, networks, risk assessment, critical infrastructure continuity and contingency planning, emergency preparedness, security awareness and training.
• Conduct network security audits
• An understanding & usage of security tools for endpoint, server, network, and infrastructure security tools, including Burp Suite, Anchore, Codenomicon, SonarQube, Zenmap, Nessus, Tenable, NMAP, Invicti, Defensics, Symantec etc.
• Use manual testing techniques and methods to gain a better understanding of the environment and reduce false positives.

Qualifications

You have

• Require bachelor's degree in engineering or with related field.
• Typically, minimum 6-10 years of relevant experience in Telecom /IT Security in a large Enterprise and telecom Operator Environment
• Good experience in Vulnerability Management, Secure configuration and Application Security tools, and techniques.
• Good knowledge of common information security management frameworks, such as ISO/IEC 27001, ITU. Tx.805 ITIL, COBIT as well as those from NIST, including 800-53 and Cybersecurity Framework.
• Good knowledge and understanding of relevant legal and regulatory requirements e.g. Country-specific telecommunication security conditions, CII (Critical Information Infrastructure) regulations etc.

It would be nice if you also had:

• Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Computer Hacking Forensic Investigator (CHFI), Any SIEM (Splunk, ArcSight or Q-Radar) certification, CEH, OSCP.
• Working experience with Cloud Native, Microservices, Containers and Virtualization Technologies like Docker, Kubernetes (K8s), and Helm is good to have.
• Experience in manual testing including Penetration testing will be added advantage.