The role involves enhancing product security, designing security architecture, leading risk assessments, and ensuring compliance with global regulations. The Architect will collaborate with development teams to implement security controls and improve information security policies.
Join our Team
**This is iPECS position/ Location is Gasan**
About this opportunity:
We are looking for a motivated Product & Information Security Architect to strengthen the security of our products and internal information assets. This role focuses on hands-on product security, working closely with development and enterprise security teams in a global environment. You will design and implement robust security controls, promote secure development practices, and lead risk assessments, vulnerability management, compliance readiness, and type approval activities to protect our platforms and services.
iPECS에서 당사의 제품 및 내부 정보 자산의 보안을 강화할 수 있는 열정적인 Product & Information Security Architect를 찾고 있습니다. 이 포지션은 실무 중심의 제품 보안 역할로, 글로벌 환경에서 개발팀 및 엔터프라이즈 보안팀과 긴밀하게 협업하게 됩니다. 팀에 합류하게 된다면 Security Architect로서 강력한 보안 통제를 설계 및 구현하고, 안전한 개발 프로세스를 정착시키며, 리스크 평가, 취약점 관리, 컴플라이언스 대응, 형식 승인 활동을 주도하여 당사의 플랫폼과 서비스를 보호하는 업무를 맡게 됩니다.
Key Responsibilities
Required Qualifications
Preferred Qualifications
Why join Ericsson?At Ericsson, you'll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what's possible. To build solutions never seen before to some of the world's toughest problems. You'll be challenged, but you won't be alone. You'll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.
What happens once you apply? Click Here to find all you need to know about what our typical hiring process looks like.Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer. learn more.
Primary country and city: Korea (the Republic of) (KR) || Seoul
Req ID: 783136
**This is iPECS position/ Location is Gasan**
About this opportunity:
We are looking for a motivated Product & Information Security Architect to strengthen the security of our products and internal information assets. This role focuses on hands-on product security, working closely with development and enterprise security teams in a global environment. You will design and implement robust security controls, promote secure development practices, and lead risk assessments, vulnerability management, compliance readiness, and type approval activities to protect our platforms and services.
iPECS에서 당사의 제품 및 내부 정보 자산의 보안을 강화할 수 있는 열정적인 Product & Information Security Architect를 찾고 있습니다. 이 포지션은 실무 중심의 제품 보안 역할로, 글로벌 환경에서 개발팀 및 엔터프라이즈 보안팀과 긴밀하게 협업하게 됩니다. 팀에 합류하게 된다면 Security Architect로서 강력한 보안 통제를 설계 및 구현하고, 안전한 개발 프로세스를 정착시키며, 리스크 평가, 취약점 관리, 컴플라이언스 대응, 형식 승인 활동을 주도하여 당사의 플랫폼과 서비스를 보호하는 업무를 맡게 됩니다.
Key Responsibilities
- Own and improve product security across the lifecycle (design, implementation, testing, and deployment including security standards, directions).
- Design security architecture to address increasing security threats and global regulations and compliance requirements.
- Assess and advise on network architecture risks, encryption choices, and secure protocol selection in collaboration with development teams.
- Perform and support security risk assessments, threat modelling, and security reviews for products.
- Support vulnerability management: identify, analyze, and track remediation of vulnerabilities, follow up on verification and closure.
- Understand security requirements from external partners and customers, translate them into concrete actions, and help prioritize them based on risk and business impact.
- Lead and coordinate Cyber Resilience Act (CRA) readiness and compliance activities for relevant products and services.
- Contribute to and improve information security policies, standards, and guidelines collaborating with Business Area's stakeholders to drive information security adaptation.
- Lead type approval activities for relevant products.
- 제품 전 생애주기(설계, 개발, 테스트, 배포) 전반의 보안 주도 및 개선, 보안 표준• 전략 수립
- 증가하는 보안 위협 및 글로벌 규제/컴플라이언스 요구사항 대응을 위한 보안 아키텍처 설계
- 개발팀 협업 기반 네트워크 아키텍처 리스크 평가, 암호화 방식 및 보안 프로토콜 선정• 자문
- 제품 보안 리스크 평가, 위협 모델링(Threat Modeling), 보안 검토 수행
- 취약점 식별• 분석, 대응 추적, 검증 및 조치 완료까지의 취약점 관리 프로세스 운영
- 외부 파트너 및 고객 보안 요구사항 분석, 실행 과제 도출 및 위험도• 비즈니스 영향도 기반 우선순위 설정
- Cyber Resilience Act(CRA) 대응 및 컴플라이언스 활동 주도, 제품 및 서비스 규제 준수 확보
- 사업부 및 이해관계자 협업 기반 정보보안 정책• 표준• 가이드라인 수립 및 개선, 보안 체계 내재화 지원
- 관련 제품 형식 승인(Type Approval) 활동 리딩 및 조율
Required Qualifications
- Bachelor's degree or higher in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience in software/IT and security
- 10+ years of experience in a security-related or software/IT engineering role, with practical exposure to product and application security, such as :
- Handling security requirements from customers and partners
- Supporting security design, review, or validation for software products or platforms
- Contributing to Enterprise information security and cyber security
- Good understanding of network, system, and application security fundamentals including :
- Vulnerability types and mitigation approaches
- Network configuration and related security risks
- Encryption, key management, and secure protocol usage
- Good understanding of major security and privacy regulations (e.g., GDPR, CCPA, HIPAA or similar) and how they influence product and information security
- Intermediate or higher level of English, both written and spoken (able to work in English-speaking teams, read/write technical documentation, and participate in meetings)
- 컴퓨터공학, 정보기술, 정보보안 또는 유관 분야 학사 이상 학위, 또는 이에 준하는 소프트웨어/IT 및 보안 실무 경험
- 보안 또는 소프트웨어/IT 엔지니어링 분야 10년 이상 경력, 제품 및 애플리케이션 보안 관련 실무 경험 포함, 예:
- 고객 및 파트너의 보안 요구사항 대응 경험
- 소프트웨어 제품/플랫폼 보안 설계, 검토 또는 검증 지원 경험
- 엔터프라이즈 정보보안 및 사이버보안 활동 기여 경험
- 네트워크, 시스템, 애플리케이션 보안 기본 원리에 대한 이해, 포함:
- 취약점 유형 및 대응(완화) 방안에 대한 이해
- 네트워크 구성 및 관련 보안 리스크에 대한 이해
- 암호화, 키 관리, 보안 프로토콜 활용에 대한 이해
- 주요 보안 및 개인정보 보호 규제(GDPR, CCPA, HIPAA 등 또는 이에 준하는 규정)에 대한 이해 및 제품/정보보안에 미치는 영향에 대한 이해
- 영어 중급 이상 수준(읽기/쓰기/말하기), 영어 기반 팀 협업, 기술 문서 작성 및 회의 참여 가능 수준
Preferred Qualifications
- Experience with secure software development lifecycle (SSDLC) or similar frameworks.
- Practical experience in one or more of the following:
- Vulnerability assessment / penetration testing
- Cloud security (e.g., UCaaS, CCaaS)
- Container / microservices security
- Experience contributing to security certification or compliance projects, such as:
- ISO27001, ISMS, CRA or similar security frameworks
- Internal or external security audit, or customer security assessments
- One or more IT security certification (e.g., CISSP, CISM, CISA, CEH, Security+, GSEC, OSCP, or equivalent).
- Basic understanding of hacking techniques, attack vectors, and common exploitation methods, and how to mitigate them.
- 보안 소프트웨어 개발 생명주기(SSDLC) 또는 유사 프레임워크 적용 경험
- 다음 중 하나 이상의 실무 경험:
- 취약점 진단 및 침투 테스트(Vulnerability Assessment / Penetration Testing) 경험
- 클라우드 보안 경험(예: UCaaS, CCaaS)
- 컨테이너 및 마이크로서비스 보안 경험
- 다음과 같은 보안 인증 또는 컴플라이언스 프로젝트 참여 경험:
- ISO 27001, ISMS, CRA 등 보안 프레임워크 대응 경험
- 내부 또는 외부 보안 감사, 고객 보안 평가 대응 경험
- 하나 이상의 IT 보안 관련 자격증 보유(CISSP, CISM, CISA, CEH, Security+, GSEC, OSCP 또는 이에 준하는 자격)
- 해킹 기법, 공격 벡터 및 주요 익스플로잇 방식에 대한 기본 이해 및 대응 방안에 대한 이해
Why join Ericsson?At Ericsson, you'll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what's possible. To build solutions never seen before to some of the world's toughest problems. You'll be challenged, but you won't be alone. You'll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.
What happens once you apply? Click Here to find all you need to know about what our typical hiring process looks like.Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer. learn more.
Primary country and city: Korea (the Republic of) (KR) || Seoul
Req ID: 783136
Top Skills
Cloud Security
Container Security
Encryption
Penetration Testing
Secure Software Development Lifecycle
Security Frameworks
Vulnerability Assessment
Similar Jobs at Ericsson
Cloud • Information Technology • Internet of Things • Machine Learning • Software • Cybersecurity • Infrastructure as a Service (IaaS)
The Local Administrator will handle various administrative tasks, support legal teams, manage financial operations, and drive process improvements while ensuring compliance and effective communication with stakeholders.
Top Skills:
MS Office
Cloud • Information Technology • Internet of Things • Machine Learning • Software • Cybersecurity • Infrastructure as a Service (IaaS)
Develop software for 5G/4G Packet Core products, focusing on coding, system design, testing, and collaboration within teams.
Top Skills:
CC++Ci/CdGitJIRALinux
Cloud • Information Technology • Internet of Things • Machine Learning • Software • Cybersecurity • Infrastructure as a Service (IaaS)
The Software Architect will lead the transformation of a cloud telephony system, focusing on dismantling legacy architectures and implementing resilient, scalable cloud-native solutions. Responsibilities include architecture leadership, system modernization, technical leadership, and technology strategy.
Top Skills:
Cloud-Native ArchitectureInfrastructure As CodeKafkaKubernetesOpenstackRabbitMQ
What you need to know about the Sydney Tech Scene
From opera to comedy shows, the Sydney Opera House hosts more than 1,600 performances a year, yet its entertainment sector isn't the only one taking center stage. The city's tech sector has earned a reputation as one of the fastest-growing in the region. More specifically, its IT sector stands out as the country's third-largest, growing at twice the rate of overall employment in the past decade as businesses continue to digitize their operations to stay competitive.
