Cyber Security Offensive Lead (IT/OT)

Location: Naples, Italy; hybrid working model with 2 days per week remotely; travel to vessels, terminals, and MSC sites required, with approximately 30% travel

Gross annual salary: €50,000–€57,000 gross per year, paid over 14 monthly installments

Company

hirify.global, under the MSC Cruises brand, operates a global cruise business with maritime, terminal, and operational facilities.

What you will do

• Define and maintain the offensive security roadmap in line with cyber strategy, risk appetite, policies, standards, and the threat landscape.
• Lead and mentor offensive security specialists and consultants, establishing methodologies, standards, and rules of engagement.
• Personally lead IT penetration tests covering cloud, infrastructure, applications, wireless environments, adversary emulation, and red team engagements.
• Coordinate third-party OT offensive security assessments across ships, terminals, and operational facilities, ensuring safe execution and minimal operational impact.
• Validate internal and supplier reports for technical quality, accurate risk ratings, and actionable remediation guidance.
• Assign remediation owners, agree plans and deadlines, and track findings to verified closure against severity-based service levels.

Requirements

• Degree in cybersecurity, computer science, engineering, or a related discipline.
• 8+ years of offensive cybersecurity experience, including 3+ years leading penetration testing, red teaming, adversary emulation, or security validation programs.
• Strong hands-on capability in penetration testing, technical rechecks, exploit validation, vulnerability research, attack path analysis, and external attack surface management.
• Advanced attacker-perspective knowledge of cloud solutions such as Azure and Amazon, networking, web applications, containers, IAM, and Zero Trust.
• Knowledge of MITRE ATT&CK, OWASP, NIST, CVSS, CIS Controls, IEC 62443, and NIST SP 800-82.
• Experience managing offensive security suppliers, scopes of work, testing rules of engagement, and consulting delivery in complex enterprise environments.
• Ability to drive vulnerability remediation with technical and business owners using vulnerability management and ticketing platforms such as ServiceNow.
• Must be based in Naples, available to travel to vessels, terminals, and MSC sites, and have the right to work in Italy; Italian and fluent English required.
• Strong critical thinking, attention to detail, pragmatic decision-making, clear communication, and the ability to manage multiple engagements in a fast-paced international environment.

Nice to have

• Experience with OT/ICS, SCADA, maritime technology, and safe OT testing.
• OSCP, OSEP, OSWE, CRTO, GPEN, GXPN, equivalent offensive certifications, or IEC 62443 qualification.

Culture & Benefits

• Permanent contract under the applicable Italian maritime-sector collective labour agreement.
• Hybrid working, flexible working hours, and meal vouchers worth €8 for each on-site working day.
• Welfare and wellbeing initiatives, health insurance, productivity award, employee assistance, and MSC group discounts and partnerships.
• Learning opportunities, regular feedback, and career development support in an inclusive international environment.