Cybersecurity Architect / Security Solution Architect (Vulnerability Management & DevSecOps)

Project overview

Contract Cybersecurity Architect/Security Solution Architect needed in Helsinki (8–10 years) to design and implement a centralized vulnerability management framework and automated code security reviews across enterprise CI/CD pipelines. The role focuses on DevSecOps controls (SAST/DAST/SCA, container security), software supply chain security, cloud and application/API security, and risk-based vulnerability prioritization/remediation.

The architect will guide security architecture for critical systems, collaborate with application owners and vendors, and evaluate AI/LLM-driven security scanning and vulnerability analysis solutions. Candidate must be security-clearance eligible (Finnish continuous residency 3 years or FI citizenship).

Requirements

• Cybersecurity architecture / security solution architecture
• Centralized vulnerability management framework design
• DevSecOps and CI/CD pipeline security
• Secure Software Development Lifecycle (SSDLC)
• Automated security scanning and code security reviews
• SAST (Static Application Security Testing)
• DAST (Dynamic Application Security Testing)
• SCA (Software Composition Analysis)
• Container security tools and practices
• Software supply chain security
• Risk-based vulnerability prioritization and remediation
• Security monitoring and risk management
• Cloud security
• API and application security
• Enterprise security architecture
• Collaboration with application owners and third-party vendors on remediation ownership
• Security clearance eligibility (Finnish continuous residency 3 years or FI citizenship)

Project details

• Start: flexible
• Remote: onsite
• Location: Finland, FI