Summer Trainee, SecDevOps Engineering

KONE Technology and Innovation (KTI) is where the magic happens at KONE. It is where we combine the physical world – escalators and elevators – with smart and connected digital systems. We are changing and improving the way billions of people move within buildings every day. We are on a mission to expand and develop new digital solutions based on emerging technologies. 

KONE R&D brings together top talent from different disciplines into an industry-leading product and technology organization. We thrive in solving complex customer challenges, connecting legacy systems with the latest technologies, across hardware and software engineering. In fact, roughly half of our R&D roles are in software development. Agile ways of working mean that we are better able to meet our customers’ rapidly evolving needs for speed and innovation in a global environment. 

KONE Cybersecurity supports the entire KONE with its cybersecurity efforts: products, customers, OT, and enterprise. We are a multinational and diverse team working with KONE business lines and functions to ensure that cybersecurity is on a good level and is continuously improved. 

We are now looking for a Summer Trainee, SecDevOps Engineering to help us improve application and infrastructure security validation and issue reporting within KONE. You will be part of the Cybersecurity team in Espoo, Finland. There is a possibility to work remotely for average three days out of the five-day working week. 

We are looking for a student to work for three to four months between April and September 2026, based on availability and preference. The start date is flexible depending on your studies. 

As a Trainee in Cybersecurity Automated Validation, you can work on various topics depending on your background: 

• Further developing the application and infrastructure security services in SecDevOps mode for various KONE applications and teams. The functionalities that you would be working with are primarily: SAST, DAST, binary and source code-based SCA (software composition analysis), network vulnerability scan, cloud security scan. These services are provided to the application teams as a deployable container, which automatically connects through AWS microservices to the actual SecDevOps services. 

• Further developing our customer integrations (i.e., different application and project teams) from SecDevOps tools to their DevOps environments running in GitHub, and GitLab. The SecDevOps toolset integrates with<