KONE Technology and Innovation (KTI) is where the magic happens at KONE. It's where we combine the physical world - escalators and elevators - with smart and connected digital systems. We are changing and improving the way billions of people move within buildings every day. We are on a mission to expand and develop new digital solutions that are based on emerging technologies.
KONE Cybersecurity team is responsible of security frameworks, processes, tools, and metrics used at KONE to control our cybersecurity risk. We work together with all KONE units globally and engage directly with customers to support their cybersecurity needs. Our North Stars aligned with KONE strategy are 1) Winning in customer trust, 2) Secure digital acceleration, and 3) Resilient supply chain and IoT.
We are now looking for a Summer Trainee, SDL Automation Developer
You will join the Product & Application Security team to prototype automated centralized monitoring of application security documentation across KONE. Your code will connect to Confluence to extract information from Security Summary documents (using KONE's established Security Summary template), replicate documented risks into a centralized risk database, and enable better central oversight and governance. (Security Summary is a key artifact in KONE's Secure Development Lifecycle).
We are looking for a 3+ year student with ongoing BSc/MSc studies in relevant field (such as Computer Science / Software Engineering, Cybersecurity, Data Science / AI) to work for up to 4 months between May and September 2026, based on availability and preference. You will be based in Espoo, Finland and we expect you to be at the office 3 days a week.
Key features you will prototype
-
Centralized automated monitoring and AI-based analysis of multiple Security Summary Confluence pages
-
Populate a centralized database with identified risks, extracted from the pages
-
Measurable Completeness Score: a deterministic metric that evaluates the technical completeness of each Security Summary.
-
AI‑estimated Security Posture Score: an AI‑driven, qualitative assessment of the documentation's content quality and coherence.
Your responsibilities
-
Integrate with Atlassian Confluence to read the Security Summary pages. Integration with ServiceNow and IriusRisk are most likely also needed.
-
Develop automation that analyzes the page, identified threats, content of risk matrices, and embedded diagrams to extract threats and risks.
-
Model and replicate risks from Security Summaries into a centralized risk datastore (relational database).
-
Design, implement, and validate a Measurable Completeness Score and an AI‑estimated Security Posture Score (as a proof-of-concept).
-
Collaborate with product teams and cybersecurity colleagues to refine data models and scoring criteria.
-
Document the system architecture, data flows, and operational runbooks.
In order to be successful in this role, you preferably have
-
Strong software development skills and ability to build production-grade prototypes.
-
Experience working with APIs (familiarity with Atlassian Confluence API and ServiceNow API is a plus).
-
Database skills (relational), including schema design and data modeling.
-
Basic understanding of application security concepts, Secure Development Lifecycle (SDL), threat modeling, and risk assessment.
-
Interest in using AI LLM techniques for text analysis and scoring.
-
Comfort with modern development workflows (Git, CI/CD) and good documentation practices.
-
Experience with serverless development on AWS is an advantage.
We offer
You will be working with highly dynamic teams significantly investing time and effort on how we develop our products and services and solutions. You get a chance to work with and participate in further developing security for products that are used by billions of users in daily basis. Products that are widely recognized by their quality and innovation.
For further information, please contact Kristian Bäckström (Product and Application Security Manager) by phone at +358405166116 on Friday 23.1. between 15-16.
Want to join the #PeopleFlow?
If you think this could be an inspiring challenge for the summer, please tell more about yourself, your availability during the summer and why you are interested in this specific role and submit your CV and application letter, max one page, including a short description of how you would approach the given prototyping task, via our Careers-site www.kone.com/jobs latest on 28.1.2026. If you have a previous project, portfolio, or work example that demonstrates relevant skills or experience, please attach it to your application or provide a brief description.
#Techsummer
#LI-IT
#LI-Hybrid
Keskitymme KONEella luomaan innovatiivista ja yhteistyöhön perustuvaa työskentelykulttuuria, jossa jokaisen panosta arvostetaan. Työntekijöiden sitoutuminen on meille avainasemassa, ja rohkaisemme jokaista osallistumaan ja jakamaan tietoa ja ideoita. Yritysvastuu on oleellinen osa yrityskulttuuriamme ja päivittäisiä toimiamme. Noudatamme eettisiä liiketoimintamenettelyitä ja pyrimme kehittämään yhdessä tekemisen kulttuuria, jossa työntekijät luottavat toisiinsa ja kunnioittavat toisiaan ja jossa hyvät suoritukset huomioidaan. Erinomaisena työpaikkana olemme ylpeitä voidessamme tarjota erilaisia kokemuksia ja mahdollisuuksia, joiden avulla saavutat ura- ja henkilökohtaiset tavoitteesi ja voit elää terveellisesti ja tasapainoisesti.
Lue lisää www.kone.com/careers
