Principal Technical Specialist

• Interprets internal and external business challenges and recommends best practices to improve product security, processes, and services.
• Applies deep organizational, product, and market knowledge to integrate cross-functional areas and contribute to strategic decision-making.
• Leads resolution of complex security and product issues using advanced analytical thinking, sound judgment, and customer-driven requirements.
• Acts as the senior technical authority and security expert for assigned products, serving as a best-practice resource and professional leader.
• Leads and manages functional teams, projects, and taskforces with moderate risk, complexity, and resource requirements, including work allocation and partner management.
• Oversees analysis, design, development, testing, and delivery of secure HW/SW solutions, including build-controlled releases and customer design engineering.
• Manages product lifecycle security through hardware/software evolution, change control, documentation, and supplier/customer notifications.
• Ensures adherence to quality standards and SW Care processes, including emergency handling, continuous improvement of tools/processes, and rapid problem restoration.

• 10+ years of experience in product / device security architecture, design, and implementation, preferably within embedded or networked device environments.
• Strong expertise in security architecture and secure design, including threat modeling, security strategies, policies, and design-for-security principles.
• Deep working knowledge of security standards and frameworks such as ISO 27001, NIST, OWASP Top 10, GDPR, and relevant regulatory guidelines, with practical application experience.
• Hands-on expertise in device and platform security, including secure boot, secure partitioning, cryptography, SSL/TLS certificates, digital signatures, and data protection mechanisms.
• Proven experience in threat and risk analysis, vulnerability assessment (CVSS), penetration-test review, and security incident handling across the product lifecycle.
• Ability to define, implement, and govern security strategies, policies, and hardening practices, ensuring compliance, quality, and continuous improvement.
• Strong collaboration skills to work cross-functionally with R&D, product, program teams, partners, and customers, including contributions to security documentation and RFPs.
• Demonstrated leadership in promoting security best practices and fostering a strong security awareness culture across engineering and stakeholder teams.

Nokia