Application Security Architect
Johnson Controls International plc20 hours ago
Budapest, HungaryMid Level
Responsibilities
- Act as a trusted security advisor throughout the software development lifecycle.
- Guide development teams on secure coding, threat modeling, security architecture, and security-by-design practices.
- Lead security requirements definition, architecture reviews, code reviews, security testing, and remediation planning.
- Translate regulatory, customer, and cybersecurity requirements into actionable security controls and development practices.
- Evaluate cybersecurity risks and recommend or implement appropriate controls.
- Collaborate with security champions, architects, engineers, product leaders, customers, and business stakeholders.
- Support security and privacy across cloud, mobile, embedded, and connected product environments.
- Monitor emerging threats, vulnerabilities, and industry practices and share recommendations across the organization.
Requirements
- At least 3 years of experience in cybersecurity, governance, risk, compliance, product security, or a related security function.
- Experience with NIST 800-53 and either ISO 27001 or SOC 2 cybersecurity and compliance frameworks.
- Experience evaluating cybersecurity risks and implementing or recommending appropriate security controls.
- Ability to translate security requirements into actionable technical guidance.
- Strong stakeholder management and relationship-building skills.
- A bachelor's degree in Cybersecurity, Computer Science, Engineering, or a related technical discipline is preferred.
- Professional cybersecurity certifications such as CISSP, GSEC, Security+, or equivalent are preferred.
- Knowledge of ISA/IEC 62443, GDPR, EU CRA, or similar compliance frameworks is preferred.
- Experience securing AI technologies and their design, implementation, and operation is preferred.
- Familiarity with operational technology, industrial controls, building management systems, or IoT ecosystems is preferred.
- Overview of SD Elements, FiniteState, ArmorCode, jFrog, and Jira is preferred.
Benefits
- Hybrid work arrangement, as indicated by the #LI-Hybrid posting designation.
- Employment with Johnson Controls, a global company focused on intelligent buildings, connected products, energy efficiency, and decarbonization.
- Commitment to diversity, inclusion, open dialogue, and valuing different perspectives.
Categories
About Johnson Controls International plc
Johnson Controls International plc builds and services building automation, HVAC (York), fire detection/suppression, security, and industrial refrigeration systems for commercial, institutional, and industrial facilities. The NYSE-listed company, headquartered in Cork, Ireland, traces its roots to 1885 and expanded via a 2016 merger with Tyco. It sells equipment, software, and lifecycle services to sectors such as data centers, healthcare, education, and advanced manufacturing, with a global installed base and service footprint.