Cybersecurity Engineering & Assessment Specialist

RINA Visualizza tutti gli annunci

  • Roma
  • Tempo indeterminato
  • Full time
  • 14 ore fa
RINA is currently recruiting for a Cybersecurity Engineering & Assessment Specialist to join its office in Rome within the Operating Engine Division.MissionThe Cybersecurity Engineering & Assessment Specialist is responsible for designing, deploying, testing, and optimizing cybersecurity technologies and defenses across IT and OT environments. This role bridges the gap between security engineering, threat simulation, and operations enablement—combining deep technical expertise, system integration skills, and offensive security knowledge to ensure that organizations build, validate, and maintain effective cyber resilience.Key AccountabilitiesCybersecurity Solution Integration & Automation
  • Design, deploy, and optimize cybersecurity platforms (e.g., SIEM/SOAR, vulnerability management, endpoint protection). -Implement automation workflows and integrations using APIs and scripting to enhance operational efficiency.
  • Extend product capabilities through custom development aligned with client and organizational needs.
Penetration Testing & Adversary Simulation
  • Conduct penetration testing and red‑team engagements across network, application, cloud, and OT environments. -Simulate real‑world attack scenarios—phishing, malware delivery, privilege escalation—to evaluate detection and response capabilities.
  • Provide remediation guidance based on realistic adversary behavior.
Vulnerability & Configuration Assessment
  • Perform vulnerability and configuration assessments across IT and industrial infrastructures.
  • Identify weaknesses in system architecture, misconfigurations, or insecure interfaces, and develop prioritized mitigation plans linked to business risk.
Industrial & Network Security Visibility
  • Assess security and monitoring capabilities within OT and industrial control systems (SCADA, PLCs, IIoT).
  • Deploy or leverage network visibility tools to identify insecure protocols and lateral movement paths.
  • Support improved segmentation, monitoring, and hardening of critical environments in accordance with IEC 62443 standards.
Security Hardening & Infrastructure Engineering
  • Support operating system and infrastructure hardening, patch management, and endpoint control implementation.
  • Ensure that deployed platforms are securely integrated within hybrid and on‑premises architectures.
Reporting, Advisory & Awareness Enablement
  • Develop clear and actionable reports describing vulnerabilities, exploitation techniques, and resolution strategies.
  • Present results to both technical and executive audiences, linking technical findings to operational and business implications.
  • Deploy and manage awareness and training platforms to reinforce organizational security culture.
Innovation & Continuous Improvement
  • Stay current on emerging threats, offensive tools, and cybersecurity technologies.
  • Pilot new solutions and techniques that strengthen automation, visibility, and testing capabilities across IT and OT domains.
EducationBachelor’s Degree in Computer Engineering or Information SystemsMaster’s Degree in Computer Engineering or Information SystemsQualifications’-Solid understanding of cybersecurity technologies, architectures, and security operations platforms (e.g., SIEM, SOAR, vulnerability management, EDR/XDR).
  • Hands‑on experience (About 5 years) in penetration testing, vulnerability assessment, and red‑team methodologies.
  • Proficiency in system integration and scripting (e.g., Python, PowerShell, Bash, API orchestration).
  • Knowledge of industrial/OT cybersecurity standards (IEC 62443) and best practices for critical infrastructure.
  • Strong analytical, troubleshooting, and problem‑solving skills.
  • Excellent communication skills in English and Italian, both written and spoken.
  • Willingness to travel domestically and internationally for project activities.
Competencies
  • DOMAIN & BUSINESS ACUMEN - Applying a scientific approach and critical thinking in operations and solution development within area of expertise.
  • FORESIGHT & INSIGHT - Context awareness adopting a systemic perspective and informed decision making.
  • INTERPERSONAL INFLUENCE - Skills and strategies we use to interact effectively with others.
  • PERSONAL EMPOWERMENT - Ownership for life, work and results, striving to grow professionally and personally.
  • WORKPLACE DYNAMICS - Resourcefulness in shaping progress and working efficiently.
RINA is a multinational company providing a wide range of services in the energy, marine, certification, infrastructure & mobility, industry, research & development sectors. Our business model covers the full process of project development, from concept to completion.At RINA, we endeavor to create a work environment where every single person is valued and encouraged to develop new ideas. We provide equal employment opportunities and are committed to creating a workplace where everyone feels respected and safe from discrimination or harassment of any kind. We are also compliant to the Italian Law n. 68⁄99.

RINA