Application Security Engineer – Hybrid, Training & Growth

TXT Group; Italia; Ibrido; EUR 26.500 - 31.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work model

Permanent contract under CCNL Commerc.

Training opportunities

Descrizione del lavoro

HSPI S.p.A., part of TXT Group, is seeking an Application Security Engineer to join the Rome team in the Cinecittà area. The role focuses on vulnerability assessments, penetration testing, threat modeling, and secure code review across web apps, cloud platforms, and containerized environments.

The candidate will produce detailed reports, classify findings with CVSS v4.0 and MITRE ATT&CK, and verify remediation via retesting.

Competenze

• Bachelor's or Master's degree in Computer Science, Computer Engineering, or a related field.
• Experience with vulnerability assessments, penetration testing, and secure code review is expected.
• Familiarity with cloud and container security (Kubernetes) is a plus.

Mansioni

• Perform vulnerability assessments and penetration tests on web apps, IT infra, cloud, and containers.
• Prepare technical reports and classify findings using CVSS, MITRE ATT&CK, and OWASP.
• Support threat modeling and risk assessment for application architectures.
• Conduct secure code reviews with SAST tools and manual analysis.

Conoscenze

Vulnerability assessment

Penetration testing

Threat modeling

Secure code review

SAST tooling

Formazione

Bachelor's degree in CS/CE

Strumenti

Burp Suite

OWASP ZAP

Nessus

Kubernetes security tools

Prowler

Trivy

Kube-bench

Descrizione del lavoro

HSPI S.p.A., part of TXT Group, is seeking an Application Security Engineer to join the Rome team in the Cinecittà area. The role focuses on vulnerability assessments, penetration testing, threat modeling, and secure code review across web apps, cloud platforms, and containerized environments.

The candidate will produce detailed reports, classify findings with CVSS v4.0 and MITRE ATT&CK, and verify remediation via retesting.