Cyber Security Specialist

OTB; Milano; In loco; EUR 55.000 - 90.000; Tempo pieno

Descrizione del lavoro

OTB Spa is seeking a Cyber Security Specialist to join the ICT Infrastructure & Operations team in Milan. The role focuses on safeguarding digital assets, ensuring confidentiality, integrity, and availability, and collaborating across SOC and IT teams on incident response and security tooling.

You will monitor threats, contribute to threat mitigation, and support vulnerability management while helping to evolve security policies and awareness programs across the organization.

Competenze

• Minimum 3 years in Cyber Security.
• Knowledge of SIEM tools (Splunk, Microsoft Sentinel).
• Hands-on experience with Firewall, VPN, IDS/IPS, EDR, DLP and related security products.
• Familiarity with NIST CSF and MITRE ATT&CK.
• Experience supporting Windows, UNIX, macOS, Linux, and mobile OS environments.

Mansioni

• Act as main contact for SOC and monitor service KPIs.
• Monitor network traffic, logs, and alerts to identify threats.
• Collaborate with SOC and IT teams on incident investigations and risk mitigation.
• Design, implement, and evolve security tools (SIEM, EDR/XDR, Vulnerability scanners).
• Manage configuration, patching, and tuning of vulnerability and scanning products.
• Assist teams with vulnerability remediation and remediation planning.
• Participate in vulnerability assessments and penetration testing.
• Develop and enforce security policies, standards, and procedures.
• Establish Security Awareness Program for employees.

Conoscenze

SOC coordination

Threat detection

Incident response

Vulnerability management

Security policies

Formazione

Bachelor's degree in Computer Science or related field

Strumenti

Splunk

Microsoft Sentinel

Firewall

EDR/XDR

DLP

NAC

Descrizione del lavoro

OTB Spa is looking for a Cyber Security Specialist to join the ICT Infrastructure & Operations department with the purpose of safeguarding the organization’s digital assets and ensuring the confidentiality, integrity, and availability of sensitive information.

In details, the resource will:

• Act as a main contact point for our SOC, monitoring the service KPI and contribute to the service improvements;
• Actively monitor network traffic, system logs, and security alerts to identify potential threats or anomalies;
• Collaborate with the SOC and OTB IT Team to investigate incidents, assess risks, and develop strategies for threat mitigation;
• Collaborate to design, implement, maintain and evolve all the security tools such as SIEM, EDR/XDR, Vulnerability scanner, IDS/IPS, Proxy etc.;
• Collaborate on the management, configuration, patching, monitoring, and fine tuning of the Vulnerability & Application Scanning products;
• Support other teams on vulnerability resolution;
• Participate in vulnerability assessments and penetration testing to proactively uncover weaknesses in the organization’s infrastructure;
• Contribute to the development and enforcement of security policies, standards, and procedures;
• Establish Security Awareness Program to educate employees about security best practices, social engineering risks, and password hygiene.

Job requirements:

• Minimum 3 years’ experience in Cyber Security area;
• Good knowledge of SIEM tools such as Splunk, Microsoft Sentinel etc.;
• Hands‑on experience and knowledge on the following technologies:
• Firewall, WAF, VPN, IDS/IPS, EDR, EPP, DLP, SWG, CASB, NAC, IAM;
• Penetration testing, vulnerability scanning, SIEM, SOAR, patch management solution, data leakage solution, DDOS prevention, DNS Security, Cloud Security;
• Familiarity with the NIST Cybersecurity Framework and a threat intelligence framework such as MITRE ATT&CK.
• Experience with supporting an environment that includes Microsoft Windows, UNIX, Macintosh OSX, Linux, and mobile operating systems;

Effectively collaborate within the team and across departments; Organize autonomously and efficiently multiple tasks;

• Self‑motivated to learn and grow;
• Preference will be given to candidates with professional security management certification, such as CompTIA Cybersecurity Analyst (CySA+), GIAC Security Essentials Certification (GSEC), Certified Ethical hacker or other similar credentials.

Job location: Milan.

#OTB

Privacy policy available here: https://apps.otb.net/hr-gdpr/