This is an exciting opportunity to join our team as a Security Specialist.
You will be able to contribute as a Security Engineer or Security Analyst according to your level of experience.
As a member of our SOC team, you will contribute to the security and compliance aspects of our product and cloud service offering that is based on AWS and Azure. You will select, design and use the tools aimed to monitor the security of our offering also responding to possible threats and incidents.
You will implement and stay abreast of Cloud and DevOps industry best practices and tooling.
You will collaborate with top-notch clients and become part of a great team, where there is room for improvement at all levels.
Main responsibilities:
- Security Monitoring and managing of SIEM tools
- Creation of rules and advanced correlations
- Fine tuning of compliance as code
- Security events analysis
- IDS/IPS analysis
- Security Incident Handling- Security incidents assessments and classification based on risk
- Vulnerability Management
- Planning and execution of periodical Vulnerability Assessments, to manage the Vulnerability Management process on cloud infrastructures, using international methodologies and standards
- Impact analysis and remediation of vulnerabilities
- Support and guide cloud devops team with the proper remediations
- Support Cyber Security operations on complex cloud infrastructures
- Contribute to didactical activities and personnel training
- Threat intelligence activities
- Evaluation of the security level of new developments
- Manage incident response
- Take part to third party audit as reference person for procedures under SOC responsibility
Language requirements:
Fluency in Italian and good knowledge of English.
Having a proved experience or knowledge in one or more of the following topics is considered a plus
- Cloud Security, Security Advisory, Security Assessment, Red/Blue Teaming, Threat Hunting, Application Security, Cloud Infrastructure Security
- SSDLC (Secure Software Development Lifecycle)
- SIEM tools
- Knowledge of regulations and main standards related to Information Security (ISO 27001 - SOC1 & SOC2 framework)
- Knowledge of specific security regulations (e.g. CASP, CISSP, CISM)