Cybersecurity Operations Specialist
NHOA Corporate
- Milano
- 35.000-45.000 € all'anno
- Tempo indeterminato
- Full time
- Implement, manage and monitor cybersecurity controls in line with industry standards and regulatory requirements
- Manage security tools and technologies, including EDR/anti-malware platforms, password managers and email filtering systems
- Run the vulnerability management process: identify, classify and risk-score vulnerabilities (CVSS/EPSS) and track remediation activities
- Coordinate the patch management cycle, working with ICT teams on Windows/Linux endpoint patching and network device updates
- Coordinate external penetration testing engagements, including scope definition, review of findings and remediation follow-up
- Manage DLP policies including classification rules, exception reviews and incident handling via Microsoft Purview
- Detect potential data breaches and unauthorized activities, supporting breach notification processes when required
- Handle SOC escalations, coordinating incident response activities including alert triage, evidence collection and containment
- Support compliance with information security standards and regulatory requirements, preparing security reports and documentation
- Maintain and enforce corporate information security policies, proposing improvements where necessary
- Collaborate with IT and other internal teams to ensure security measures are embedded across systems and processes
- Perform security assessments of new tools and vendors before procurement approval (data flows, access models, vendor posture and contractual requirements)
- Monitor attack surface exposure and cloud misconfigurations, and coordinate periodic access reviews
- Stay up to date with emerging cyber threats, trends and technologies
- 3-6 years of experience in security operations, incident response or SOC environments
- Bachelor’s degree or diploma in Computer Science, Information Technology or related fields
- Hands-on experience with EDR/XDR platforms
- Proven incident response experience, including triage, containment and post-incident activities
- Practical experience with vulnerability management, including scanning tools, CVSS scoring and remediation tracking
- Working knowledge of patch management processes
- Familiarity with cybersecurity regulations and standards such as NIS2 or ISO/IEC 27001
- Strong communication skills in Italian and English, both written and spoken
- Ability to manage priorities and deadlines while working both independently and within a team
- Strong attention to detail and high level of accuracy
- Continuous learning mindset and ability to adapt to evolving cyber threats and technologies
- Experience with SIEM platforms (Google SecOps preferred)
- Background in manufacturing, energy, or OT/SCADA environments (awareness of IEC 62443)
- Cybersecurity certifications such as CompTIA Security+, CySA+, GCIH, SC-200, AZ-500, CEH or equivalent
- Experience with DLP platforms (Microsoft Purview)
- Basic scripting skills (Python, KQL, PowerShell) for automation and SIEM queries