Back to listings
KONE OyjEspoo –

Summer Trainee, SDL Automation Developer

Description

KONE Technology and Innovation (KTI) is where the magic happens at KONE. It's where we combine the physical world - escalators and elevators - with smart and connected digital systems. We are changing and improving the way billions of people move within buildings every day. We are on a mission to expand and develop new digital solutions that are based on emerging technologies.

KONE Cybersecurity team is responsible of security frameworks, processes, tools, and metrics used at KONE to control our cybersecurity risk. We work together with all KONE units globally and engage directly with customers to support their cybersecurity needs. Our North Stars aligned with KONE strategy are 1) Winning in customer trust, 2) Secure digital acceleration, and 3) Resilient supply chain and IoT.

We are now looking for a Summer Trainee, SDL Automation Developer

You will join the Product & Application Security team to prototype automated centralized monitoring of application security documentation across KONE. Your code will connect to Confluence to extract information from Security Summary documents (using KONE's established Security Summary template), replicate documented risks into a centralized risk database, and enable better central oversight and governance. (Security Summary is a key artifact in KONE's Secure Development Lifecycle).

We are looking for a 3+ year student with ongoing BSc/MSc studies in relevant field (such as Computer Science / Software Engineering, Cybersecurity, Data Science / AI) to work for up to 4 months between May and September 2026, based on availability and preference. You will be based in Espoo, Finland and we expect you to be at the office 3 days a week.

Key features you will prototype

  • Centralized automated monitoring and AI-based analysis of multiple Security Summary Confluence pages
  • Populate a centralized database with identified risks, extracted from the pages
  • Measurable Completeness Score: a deterministic metric that evaluates the technical completeness of each Security Summary.
  • AI-estimated Security Posture Score: an AI-driven, qualitative assessment of the documentation's content quality and coherence.

Your responsibilities

  • Integrate with Atlassian Confluence to read the Security Summary pages. Integration with ServiceNow and IriusRisk are most likely also needed.
  • Develop automation that analyzes the page, identified threats, content of risk matrices, and embedded diagrams to extract threats and risks.
  • Model and replicate risks from Security Summaries into a centralized risk datastore (relational database).
  • Design, implement, and validate a Measurable Completeness Score and an AI-estimated Security Posture Score (as a proof-of-concept).
  • Collaborate with product teams and cybersecurity colleagues to refine data models and scoring criteria.
  • Document the system architecture, data flows, and operational runbooks.

In order to be successful in this role, you preferably have

  • Strong software development skills and ability to build production-grade prototypes.
  • Experience working with APIs (familiarity with Atlassian Confluence API and ServiceNow API is a plus).
  • Database skills (relational), including schema design and data modeling.
  • Basic understanding of application security concepts, Secure Development Lifecycle (SDL), threat modeling, and risk assessment.
  • Interest in using AI LLM techniques for text analysis and scoring.
  • Comfort with modern development workflows (Git, CI/CD) and good documentation practices.
  • Experience with serverless development on AWS is an advantage.

We offer

You will be working with highly dynamic teams significantly investing time and effort on how we develop our products and services and solutions. You get a chance to work with and participate in further developing security for products that are used by billions of users in daily basis. Products that are widely recognized by their quality and innovation.

For further information, please contact Kristian Bäckström ( Product and Application Security Manager) by phone at +XXXXXX-XXXX on Friday 23.1. between 15-16.

Want to join the #PeopleFlow?

If you think this could be an inspiring challenge for the summer, please tell more about yourself, your availability during the summer and why you are interested in this specific role and submit your CV and application letter, max one page, including a short description of how you would approach the given prototyping task**,** via our Careers-site latest on 28.1.2026. If you have a previous project, portfolio, or work example that demonstrates relevant skills or experience, please attach it to your application or provide a brief description.

#Techsummer

#LI-IT

#LI-Hybrid

At KONE, we are focused on creating an innovative and collaborative working culture where we value the contribution of each individual. Employee engagement is a key focus area for us and we encourage participation and the sharing of information and ideas. Sustainability is an integral part of our culture and the daily practice. We follow ethical business practices and we seek to develop a culture of working together where co-workers trust and respect each other and good performance is recognized. In being a great place to work, we are proud to offer a range of experiences and opportunities that will help you to achieve your career and personal goals and enable you to live a healthy and balanced life.

Read more on

Skills

CI/CDApplication SecurityCybersecurityAIGitSecurityConfluenceData ScienceAWSAPILLM