Product & Solution Security Expert 80-100%

Together with our customers, we combine the real and digital worlds. We are seeking a highly skilled and experienced Product & Solution Security Expert with a strong background in AWS, cloud security, AI security, governance, risk and compliance (GRC), and secure software development, who is passionate about cybersecurity and AI, to join our Building X cloud ecosystem. The ideal candidate will support and consult product teams in implementing security features, identifying security risks, driving continuous compliance initiatives, and enabling the secure adoption of AI-powered development capabilities. This role involves working closely with product teams to conduct security activities throughout the development process and driving a company-wide Shift-Left Security culture across software engineering, cloud operations, and AI-enabled development processes.

Would you also like to play an active role in influencing current trends and developments and make a positive impact on the lives of millions of people in Switzerland? Then you’ve come to the right place!

• Support and consult product lines in implementing required product and solution security practices
• Act as the primary security point of contact for product teams during development, project execution, and service operations
• Report to the Product / Technical Lead and the Product & Solution Security Officer
• Provide specialized knowledge in secure architecture and design to help product teams create and operate secure applications and services
• Bring a strong application-security perspective by understanding the application stack end to end, including frontend, backend, APIs, data, identity, infrastructure, and cloud layers
• Provide strong AWS security expertise to improve the security posture of cloud-native applications and services
• Support security assessments, threat modeling, risk analysis, and remediation planning throughout the software lifecycle
• Support the implementation of Cybersecurity Compliance programs across multiple product teams
• Define compliance-by-design approaches and integrate security and compliance controls directly into engineering workflows
• Support audits and certification programs including ISO 2700, SOC2, and internal security and compliance assessments
• Drive the organization's Shift-Left Security strategy, enabling teams to identify and address security issues early in the development lifecycle
• Define and implement secure development practices, policies, standards, and guardrails
• Work closely with development teams to embed security controls into CI/CD pipelines
• Support implementation of secure coding practices, software supply chain security, dependency and container security, Infrastructure as Code (IaC) security, Cloud Security Posture Management (CSPM), and vulnerability and risk management processes
• Promote self-service security capabilities and security automation across engineering teams
• Contribute to the design of the Building X Agentic AI Framework operating model
• Define security requirements, governance standards, and control frameworks for AI-assisted development
• Conduct risk assessments, threat modeling, and security reviews for AI-enabled product development workflows
• Collaborate with platform, architecture, and development teams to embed Security-by-Design and Compliance-by-Design principles into the AI Development Lifecycle (AI-DLC)
• Support alignment with emerging AI security and governance standards (e.g., ISO 42001)