Security Analyst

The InfoSec SAS Solution Analysis & Advisory team is in charge of the security prevention area, being responsible for supporting IT and the business by assisting on the build of a strong line of defense, as well by detecting security issues beforehand, through conducting technical activities aimed at preventing cyber security incidents, ensuring the implementation and verification of cyber security controls making sure that those are fully harmonized with the company security policies and guidelines, by perform risk analysis, as well security advisory consultancy on a wide variety of information security topics and domains. Perform security assessments and security audits on either new or existing solutions, for both IT and business groups, as well on other activities such as divestitures, solution analysis and focused assessments, following a secure by design approach. Translate security strategies into security requirements and use cases, as well operational requirements (threat modelling, alerting rules…). Provide security consulting and advisory for Nokia IT, Nokia Business Groups and Corporate Functions, supporting them on becoming compliant against Nokia Security Policies. Provide feedback to suppliers and propose actions to mitigate any solution shortcomings, Support various Nokia IT & BG teams in advising on security best practices to ensure that Nokia’s critical assets & data always remain fully protected & secure (support in new supplier contract negotiations, support on merger & acquisitions activities, etc…). Act as Trusted Security Advisor towards your peers and other Nokia stakeholders in BG's and other central functions across various security domains (Zero Trust Network Architecture, evolution to IPv6, IAM, secure Network & Application Segmentation, cloud & network security, application security, AI technologies, Software Security, Security Automation, Data Security, BC/DR & Cyber Resiliency, malicious attack types & penetration testing techniques…) Detect security flaws in existing digital solutions and provide recommendations on how to overcome these findings in a secure and cost-efficient manner by performing pro-active security architecture assessments and by staying abreast of new attack tactics and techniques. Define & introduce new innovative security solutions into Nokia’s Corporate Infrastructure. This effort encompasses activities like strategic solution thinking, solution budgeting, solution presentations, solution design, solution testing & validation, solution delivery. Must-have: Bachelor's degree with Minimum of 5 years of relevant professional experience Solid and proven technical expertise in one or more multiple cyber security domains, such as (non-exhaustive) endpoint security, application security testing, ERP, and cloud security. Strong knowledge and experience in public cloud solutions (multi-cloud environments). Practical knowledge on network security, networking concepts and architectural implementations and Practical knowledge on vulnerability testing and capability to define proper remediations. Practical knowledge on application, database, and infrastructure security, having a strong understanding on ERP / SAP systems and how to secure them. Nice-to-Have: Degree or master’s degree in Computer Science, Information Systems, Cyber Security, Information Assurance, Information Security, or related technical field and one or more of the following cyber security certifications: CISSP, CCSP, CRISC or GCP Cloud Security Engineer. Attention to detail, excellent problem solving, and follow-up skills are required. Ability to convey technical security concepts to non-technical audiences and Strong technology insight with a full appreciation on how technology can enable positive business transformation and stay abreast on any new AI development and translate those into valuable use cases for Nokia Group Security or Nokia corporate environment and Translate the impact of existing & emerging AI technologies onto Nokia's security posture. Demonstrated hands-on AI skills & technical experience with Prompt Engineering, LLM, Agentic AI, A2A/MCP,... is considered as a plus.