aici cdsastdevsecopswafcybersecuritydastowaspapplication securityapi security
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
По международному рынку данных пока нет
На СНГ рынке: $3.3к/мес ($2.4к - $3.7к)
84
Хорошая вакансия
развернуть
Чёткие задачи в application security, постоянный контракт и заявленные возможности развития делают вакансию привлекательной, но работа доступна только в Италии и требует свободного итальянского.
Кликните для подробной информации
Только в ИталииАктуальные практикиПонятные задачиПоддержка развитияГибкий график
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Cyber Security Architecture - Application Specialist (Application Security/DevSecOps): Securing custom-developed, enterprise, web, and mobile applications with an accent on security-by-design, SSDLC controls, and application protection. Focus on integrating SAST, DAST, software composition analysis, secrets management, WAF, API protection, and bot management while reviewing architectures and validating security findings.
Location: Naples, Italy; hybrid working model with 2 days per week remotely. Right to work in Italy required.
Gross annual salary: €33,000–€37,000 gross per year, paid over 14 monthly installments.
Company
hirify.global, under the MSC Cruises brand, operates in the cruise and travel industry.
What you will do
Design and implement security controls and architectures for custom-developed, packaged, web, and mobile applications.
Embed security-by-design principles and DevSecOps practices throughout the Secure Software Development Lifecycle.
Integrate SAST, DAST, software composition analysis, and secrets management into CI/CD pipelines.
Review application architectures and technical designs, define security requirements, and recommend controls.
Assess enterprise and third-party applications, review application protection technologies, validate findings, and maintain security standards and reference architectures.
Requirements
Degree in computer science, engineering, cybersecurity, or a related field.
Italian as the primary language and fluent English.
2–5 years of experience in application security or software development with a security focus.
Experience with CI/CD security controls, SAST, DAST, software composition analysis, and secrets management.
Knowledge of web, API, and mobile application security principles, including OWASP standards.
Understanding of authentication, authorization, CSP, CORS, session management, cookies, tokens, and application integration security.
Familiarity with WAF, API protection, and bot management technologies.
Ability to work with developers, architects, DevOps engineers, and technical stakeholders, supported by strong communication, analytical, documentation, and problem-solving skills.
Right to work in Italy.
Nice to have
Familiarity with AI-enabled applications and AI-assisted development.
Experience with Checkmarx, Akamai, Cloudflare, or similar technologies.
Software development experience.
CSSLP or a similar security certification.
Culture & Benefits
Permanent contract under the applicable Italian collective labour agreement for shore-based personnel in private shipping companies.
Hybrid work with two remote days per week and flexible working hours.
€8 meal vouchers for each on-site working day.
Welfare and wellbeing initiatives, health insurance, productivity award, learning opportunities, Employee Assistance Programme, and MSC group discounts and partnerships.
Inclusive environment supporting wellbeing, continuous learning, career growth, and diverse perspectives.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →