TL;DR
Senior Cyber Security Specialist: Designing and delivering innovative security plans for products and cloud services with an accent on monitoring, threat response, and compliance. Focus on assessing AI-leveraging products, incident handling, vulnerability management, and supporting SSDLC in complex cloud infrastructures.
Location: Hybrid role requiring attendance 2 days a week at offices in Lucca, Milan, Turin, Rome, or Salerno, Italy.
Company
hirify.global is a global information services company providing professional solutions across various industries.
What you will do
- Select, design, and utilize tools for monitoring security and responding to threats and incidents.
- Implement and stay current with Cloud and DevOps industry best practices and tooling.
- Take part in assessing the security of products leveraging AI.
- Apply Incident Response procedures and classify security incidents based on risk.
- Design, plan, and execute periodical Vulnerability Assessments on cloud infrastructures.
- Support development teams in designing threat modeling and defining security requirements, including SecDevOps activities.
Requirements
- At least 7 years of experience in cyber security roles.
- Experience with modern security tools and platforms, including WAF, SIEM, IDS/IPS, Cloud Provider Threat Detection Service, CIEM, and EDR technologies.
- Strong understanding of the Secure Software Development Lifecycle (SSDLC).
- Familiarity with major Information Security regulations and standards (e.g., ISO 27001, SOC 1 & SOC 2, DORA, NIS2).
- Ability to analyze code and support secure development practices.
- Fluency in Italian and good knowledge of English (B2) required.
Culture & Benefits
- Flexible working hours and a hybrid working policy (3 days remote, 2 days in office).
- Access to English classes and e-learning platforms such as Pluralsight, LinkedIn Learning, and Udemy.
- Possibility of certification paths for cloud providers and security.
- Development plans to steer career paths, with annual performance and salary reviews.
- Community and teambuilding events like global code games and networking events.
Hiring process
- Candidates are kindly asked to participate in interviews without the assistance of AI tools or external prompts.
- Remove virtual backgrounds and include in-person interviews in the hiring process.
- Use of AI-generated responses or third-party support during interviews will be grounds for disqualification.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →