Application Security Architect
Johnson Controls International plc20 hours ago
Prague, CzechiaMid Level
Responsibilities
- Advise engineering, product, and business teams on secure coding, threat modeling, security architecture, and security-by-design practices.
- Lead secure SDLC activities including security requirements definition, architecture reviews, code reviews, security testing, and remediation planning.
- Translate regulatory, customer, and cybersecurity requirements into practical security controls and development practices.
- Evaluate cybersecurity risks and recommend or implement appropriate security controls across cloud, mobile, embedded, and connected products.
- Collaborate with security champions, architects, engineers, and product leaders to balance security, usability, and business objectives.
- Track emerging threats, vulnerabilities, and industry practices while sharing security guidance across the organization.
Requirements
- At least 3 years of experience in cybersecurity, governance, risk, compliance, product security, or a related security function.
- Experience with NIST 800-53 and ISO 27001 or SOC 2 frameworks.
- Ability to evaluate cybersecurity risks and implement or recommend appropriate security controls.
- Ability to translate security requirements into actionable technical guidance and build trusted stakeholder relationships.
- Bachelor's degree in Cybersecurity, Computer Science, Engineering, or a related technical discipline is preferred.
- Professional cybersecurity certification such as CISSP, GSEC, Security+, or equivalent is preferred.
- Knowledge of ISA/IEC 62443, GDPR, EU CRA, or similar compliance frameworks is preferred.
- Experience securing AI capabilities within products and familiarity with OT, industrial controls, building management systems, or IoT ecosystems are preferred.
- Familiarity with SD Elements, FiniteState, ArmorCode, JFrog, and Jira is preferred.
Benefits
- Hybrid work arrangement is indicated by the #LI-Hybrid designation.
- Johnson Controls emphasizes diversity, inclusion, and an open, collaborative work environment.
Categories
About Johnson Controls International plc
Johnson Controls International plc builds and services building automation, HVAC (York), fire detection/suppression, security, and industrial refrigeration systems for commercial, institutional, and industrial facilities. The NYSE-listed company, headquartered in Cork, Ireland, traces its roots to 1885 and expanded via a 2016 merger with Tyco. It sells equipment, software, and lifecycle services to sectors such as data centers, healthcare, education, and advanced manufacturing, with a global installed base and service footprint.