Product & Solution Security Expert

Together with our customers, we combine the real and digital worlds

We are seeking a highly skilled and experienced Product & Solution
Security Expert with a strong background in AWS, cloud security, AI security, governance, risk and compliance (GRC), and secure software development
, who is passionate about cybersecurity and AI, to join our Building X cloud ecosystem. The ideal candidate will support and consult product teams in implementing security features in their products, identifying security risks, driving continuous compliance initiatives, and enabling the secure adoption of AI-powered development capabilities.

This role involves working closely with product teams to conduct security activities throughout the development process and driving a company-wide Shift-Left Security culture across software engineering, cloud operations, and AI-enabled development processes.

Would you also like to play an active role in influencing current trends and developments and make a positive impact on the lives of millions of people in Switzerland? Then you’ve come to the right place!

• Supporting and consulting our product lines in implementing required product and solution security practices
• Acting as the primary security point of contact for product teams during development, project execution, and service operations
• Reporting to the Product / Technical Lead and the Product & Solution Security Officer
• Providing specialized knowledge in secure architecture and design to help product teams create and operate secure applications and services
• Bringing a strong application-security perspective by understanding the application stack end to end, including frontend, backend, APIs, data, identity, infrastructure, and cloud layers
• Providing strong AWS security expertise to improve the security posture of cloud-native applications and services
• Supporting security assessments, threat modeling, risk analysis, and remediation planning throughout the software lifecycle

• Supporting the implementation of Cybersecurity Compliance programs across multiple product teams
• Defining compliance-by-design approaches and integrating security and compliance controls directly into engineering workflows
• Supporting audits and certification programs including: ISO 2700, SOC2 and Internal security and compliance assessments

• Driving the organization's Shift-Left Security strategy, enabling teams to identify and address security issues early in the development lifecycle
• Defining and implementing secure development practices, policies, standards, and guardrails
• Working closely with development teams to embed security controls into CI/CD pipelines
• Supporting implementation of: ake care of secure coding practices, software supply chain security, dependency and container security, Infrastructure as Code (IaC) security, Cloud Security Posture Management (CSPM), and vulnerability and risk management processes

• Promoting self-service security capabilities and security automation across engineering teams
• Contributing to the design of the Building X Agentic AI Framework operating model
• Defining security requirements, governance standards, and control frameworks for AI-assisted development
• Conducting risk assessments, threat modeling, and security reviews for AI-enabled product development workflows
  
  Collaborate with platform, architecture, and development teams to embed Security-by-Design and Compliance-by-Design principles into the AI Development Lifecycle (AI-DLC)
• Support alignment with emerging AI security and governance standards (e.g., ISO 42001)

• Master's degree in Information Systems, Cybersecurity, Computer Science, or a related field
• Extensive experience (5+ years) as a Security Expert with deep knowledge of AWS security services, architectures, and best practices
• Experience implementing security controls in cloud-native and SaaS environments, coupled with a strong understanding of modern application architectures across all layers
• Proven experience in driving Continuous Compliance…