
Product Security Lead – Pathfinder
City : Ottawa, Ontario
Category : Permanent
Industry : Applied R&D
Employer : Nokia
Come create the technology that helps the world act together
We are a B2B technology innovation leader pioneering the future where networks meet cloud.
At Nokia you will have a positive impact on people's lives and help build the capabilities needed for a more productive, sustainable, and accessible world.
Be part of a culture built on an inclusive way of working where we are open to your ideas, you are empowered to take risks and are encouraged to be fearless in bringing your authentic self to work.
The team you will be a part of
Cloud and Network Services
As Nokia's growth engine, we create value for communication service providers and enterprise customers by leading the transition to cloud-native software and as-a-service delivery models. Our inclusive team of dreamers, doers and disruptors push the limits from impossible to possible.
Come be part of a brand new initiative, driving innovation for Enterprise customers. Project Pathfinder sets out to bring value and insight of networks through Observability, AI & Analytics, Security, and a unique focus on Carbon Intensity. A vision for advanced capabilities is being set forth through new technology. This new group has exciting opportunities to make a difference in Cloud Native, Edge Operations, and Industry 4.0.
What you will learn and contribute to
As part of the team, you will:
- Be self-driven in creating and maintaining Security and privacy Specification, Security High-Level Design, Threat and Risk Analysis and Hardening Specification Document for the product as required by Nokia's design for security process.
- Assess emerging security vulnerabilities, provide applicable workarounds, and determine need for security vulnerability fixes. Work closely with software architect and software R&D team to analyze vulerabilities.
- Work together with product management to provide impact analysis for the Security requirement at the Organization level.
- Understand Privacy principles, GDPR and best practices on securing the deployment.
- Provide expert technical contribution to the design of security infrastructures that support the overarching security policies and doctrines of the customer.
- Provide technical knowledge and analysis of information assurance, to include applications, operating systems, physical security, networks, risk assessment, critical infrastructure continuity and contingency planning, emergency preparedness, security awareness and training.
- Be able to drive penetration testing activities for the benefit of a hardened final solution.
Your skills and experience
You have :
- Bachelor's degree in Eng, CS, or related field.
- 6-8+ years experience in product development with strong communication and analytical skills.
- Experience with Cloud Native, Microservices, Containers and Virtualization Technologies like Docker, Kubernetes (K8s), Helm, and Open Source Integration.
- A deep understanding of deployment using Cloud Native Principles.
- A deep understanding of the open source libraries/APIs chosen for past products and be able to explain your design choices.
- Working experience with Cloud technologies like OpenStack, Amazon Web Services is a plus.
- Preference given to candidates with knowledge of microservices, docker, helm, MariaDB.
- Candidate must have knowledge on CI/CD, database backup/restores and Internals of Kubernetes networking.
It would be nice if you also had:
- Experience with Nokia Security tools including VAMS
- Experience with tools such as Burp Suite, Anchore, JFrog Xray, Nessus
What we offer
Nokia offers flexible and hybrid working schemes, continuous learning opportunities, well-being programs to support you mentally and physically, opportunities to join and get supported by employee resource groups, mentoring programs and highly diverse teams with an inclusive culture where people thrive and are empowered.
- An exciting new area where products are being grown from the ground-up
- Small to medium sized development teams, hungry to make a difference
- An open and easy-going team culture, striving for common goals
Nokia is committed to inclusion and is an equal opportunity employer
Nokia has received the following recognitions for its commitment to inclusion & equality:
- One of the World's Most Ethical Companies by Ethisphere
- Gender-Equality Index by Bloomberg
- Workplace Pride Global Benchmark
At Nokia, we act inclusively and respect the uniqueness of people.
Nokia's employment decisions are made regardless of race, color, national or ethnic origin, religion, gender, sexual orientation, gender identity or expression, age, marital status, disability, protected veteran status or other characteristics protected by law.
We are committed to a culture of inclusion built upon our core value of respect.
Join us and be part of a company where you will feel included and empowered to succeed.