Cyber Security Consultant

Pentasia; Bologna; Hybrid; EUR 60,000 - 90,000; Full time

Job summary

Pentasia is seeking an experienced Cybersecurity Consultant II to join an international team specializing in penetration testing, security assessments, and risk management. You will independently conduct advanced tests across networks, cloud infrastructures, web and mobile apps, and APIs, identifying vulnerabilities and delivering practical remediation guidance.

You will also manage projects from planning through delivery, present findings to stakeholders, review technical reports, and provide

Qualifications

• At least 3 years of cybersecurity or penetration testing experience.
• An industry-recognised penetration testing certification (OSCP, eCPPT, GIAC GPEN).
• Strong knowledge of Linux, Windows, networking, web app security, and cloud security.
• Hands-on experience conducting network, web application, and API penetration tests independently.
• Ability to manage projects autonomously from start to finish.
• Excellent written and verbal communication and client-focused approach.
• A degree in Computer Science, Information Systems, or a related field preferred; equivalent professional experience will be considered.

Responsibilities

• Plan and execute complex penetration tests and security assessments across different technologies and environments.
• Manage engagements independently, coordinating with clients, project managers, and technical teams.
• Troubleshoot technical issues, identify root causes, and resolve project blockers.
• Document vulnerabilities, assess risks, and deliver detailed technical reports.
• Present findings and recommend remediation strategies and appropriate security controls.
• Ensure assessments comply with relevant regulatory requirements and quality standards.
• Mentor junior consultants and support their technical development.
• Stay up to date with emerging threats, vulnerabilities, and security testing methodologies.
• Contribute to improvements in internal tools, processes, and technical practices.

Skills

Penetration testing

Security assessments

Project management

Analytical thinking

Report writing

Communication

Mentoring

Education

Degree in Computer Science or related field

Tools

Linux

Windows

Networking

Cloud security

Job description

We are looking for an experienced Cybersecurity Consultant II to join an international cybersecurity team specialising in penetration testing, security assessments, and risk management.

This role offers the opportunity to work on complex security projects, identify vulnerabilities across diverse technology environments, and help organisations strengthen their security posture.

The position can be based in Bologna, Villanova di Camposampiero, or Gorizia, with remote work also considered for candidates located near a major airport.

About the Role:

You will independently conduct advanced penetration tests and security assessments across networks, operating systems, cloud infrastructures, web and mobile applications, and APIs. You will identify vulnerabilities, simulate real-world attack scenarios, and provide practical recommendations to improve clients' security.

You will also manage projects from planning through delivery, present findings to stakeholders, review technical reports, and provide guidance to junior consultants.

Key Responsibilities:

• - Plan and execute complex penetration tests and security assessments across different technologies and environments.
• - Manage engagements independently, coordinating with clients, project managers, and technical teams.
• - Troubleshoot technical issues, identify root causes, and resolve project blockers.
• - Document vulnerabilities, assess risks, and deliver detailed technical reports.
• - Present findings and recommend remediation strategies and appropriate security controls.
• - Ensure assessments comply with relevant regulatory requirements and quality standards.
• - Mentor junior consultants and support their technical development.
• - Stay up to date with emerging threats, vulnerabilities, and security testing methodologies.
• - Contribute to improvements in internal tools, processes, and technical practices.

Requirements:

• - At least 3 years of relevant cybersecurity or penetration testing experience.
• - An industry-recognised penetration testing certification, such as OSCP, eCPPT, or GIAC GPEN.
• - Strong knowledge of Linux, Windows, networking, web application security, and cloud security.
• - Hands-on experience independently conducting network, web application, and API penetration tests.
• - Ability to manage projects autonomously from start to finish.
• - Strong analytical, troubleshooting, and organisational skills.
• - Excellent written and verbal communication skills.
• - High attention to detail and a client-focused approach.
• - A degree in Computer Science, Information Systems, or a related field is preferred; equivalent professional experience will also be considered.

Nice to Have:

• - Advanced offensive security certifications, such as OSEP, OSWE, OSED, eWPTX, or CRTO.
• - AWS or Azure security certifications or practical cloud security experience.
• - Experience in gaming, lottery, or other regulated industries.
• - Familiarity with regulatory testing and compliance reporting.
• - Scripting skills in Python, PowerShell, or Bash.
• - Knowledge of ISO/IEC 27001:2022 and NIST CSF.
• - Experience mentoring colleagues or contributing to security research.
• - Exposure to physical security testing, phishing, or social engineering.