Cybersecurity Assessment & Testing Engineer

RINA Piraeus Team; Roma; In loco; EUR 35.000 - 45.000; Tempo pieno

Descrizione del lavoro

RINA is seeking a Cybersecurity Assessment & Testing Engineer to join the Rome office within the Operating Engine division. The role designs, deploys, tests, and optimizes cybersecurity technologies across IT and OT environments, bridging security engineering, threat simulation, and operations enablement.

Ideal candidates have about 5 years of hands-on security experience, a Bachelor’s degree in Computer Engineering or Information Systems, and fluent English and Italian.

Competenze

• Solid understanding of cybersecurity technologies, architectures, and security operations platforms (SIEM, SOAR, vulnerability management, EDR/XDR).
• Hands-on experience (About 5 years) in penetration testing, vulnerability assessment, and red-team methodologies.
• Proficiency in system integration and scripting (e.g., Python, PowerShell, Bash, API orchestration).
• Knowledge of industrial/OT cybersecurity standards (IEC 62443) and best practices for critical infrastructure.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication skills in English and Italian, both written and spoken.
• Willingness to travel domestically and internationally for project activities.

Mansioni

• Design, deploy, and optimize cybersecurity platforms (SIEM/SOAR, vulnerability management, endpoint protection).
• Implement automation workflows and integrations using APIs and scripting to enhance operational efficiency.
• Extend product capabilities through custom development aligned with client and organizational needs.
• Conduct penetration testing and red-team engagements across network, application, cloud, and OT environments.
• Simulate real-world attack scenarios—phishing, malware delivery, privilege escalation—to evaluate detection and response capabilities.
• Provide remediation guidance based on realistic adversary behavior.
• Perform vulnerability and configuration assessments across IT and industrial infrastructures.
• Identify weaknesses in system architecture, misconfigurations, or insecure interfaces, and develop prioritized mitigation plans linked to business risk.
• Assess security and monitoring capabilities within OT and industrial control systems (SCADA, PLCs, IIoT).
• Deploy or leverage network visibility tools to identify insecure protocols and lateral movement paths.
• Support improved segmentation, monitoring, and hardening of critical environments in accordance with IEC 62443 standards.
• Support operating system and infrastructure hardening, patch management, and endpoint control implementation.
• Ensure that deployed platforms are securely integrated within hybrid and on-premises architectures.
• Develop clear and actionable reports describing vulnerabilities, exploitation techniques, and resolution strategies.
• Present results to both technical and executive audiences, linking technical findings to operational and business implications.
• Deploy and manage awareness and training platforms to reinforce organizational security culture.
• Stay current on emerging threats, offensive tools, and cybersecurity technologies.
• Pilot new solutions and techniques that strengthen automation, visibility, and testing capabilities across IT and OT domains.

Conoscenze

Cybersecurity technologies

SIEM/SOAR

EDR/XDR

Penetration testing

Vulnerability assessment

Red-team methodologies

System integration

Scripting (Python)

PowerShell

Bash

API orchestration

IEC 62443

English & Italian

Formazione

Bachelor’s Degree in Computer Engineering or Information Systems

Strumenti

SIEM

SOAR

Vulnerability management

EDR/XDR

Descrizione del lavoro

Cybersecurity Assessment & Testing Engineer (JC_1600)

City: Roma

Location: Roma, IT, 00144

Contract Type: Permanent

Division: Operating Engine

Level of experience: Intermediate

RINA is currently recruiting for a Cybersecurity Assessment & Testing Engineer (JC_1600) to join its office in ROME within the Operating Engine Division.

Mission

The Cybersecurity Assessment & Testing Engineer is responsible for designing, deploying, testing, and optimizing cybersecurity technologies and defenses across IT and OT environments. This role bridges the gap between security engineering, threat simulation, and operations enablement—combining deep technical expertise, system integration skills, and offensive security knowledge to ensure that organizations build, validate, and maintain effective cyber resilience.

Key Accountabilities

Cybersecurity Solution Integration & Automation

• Design, deploy, and optimize cybersecurity platforms (e.g., SIEM/SOAR, vulnerability management, endpoint protection).
• Implement automation workflows and integrations using APIs and scripting to enhance operational efficiency.
• Extend product capabilities through custom development aligned with client and organizational needs.

Penetration Testing & Adversary Simulation

• Conduct penetration testing and red‑team engagements across network, application, cloud, and OT environments.
• Simulate real‑world attack scenarios—phishing, malware delivery, privilege escalation—to evaluate detection and response capabilities.
• Provide remediation guidance based on realistic adversary behavior.

Vulnerability & Configuration Assessment

• Perform vulnerability and configuration assessments across IT and industrial infrastructures.
• Identify weaknesses in system architecture, misconfigurations, or insecure interfaces, and develop prioritized mitigation plans linked to business risk.

Industrial & Network Security Visibility

• Assess security and monitoring capabilities within OT and industrial control systems (SCADA, PLCs, IIoT).
• Deploy or leverage network visibility tools to identify insecure protocols and lateral movement paths.
• Support improved segmentation, monitoring, and hardening of critical environments in accordance with IEC 62443 standards.

Security Hardening & Infrastructure Engineering

• Support operating system and infrastructure hardening, patch management, and endpoint control implementation.
• Ensure that deployed platforms are securely integrated within hybrid and on‑premises architectures.

Reporting, Advisory & Awareness Enablement

• Develop clear and actionable reports describing vulnerabilities, exploitation techniques, and resolution strategies.
• Present results to both technical and executive audiences, linking technical findings to operational and business implications.
• Deploy and manage awareness and training platforms to reinforce organizational security culture.

Innovation & Continuous Improvement

• Stay current on emerging threats, offensive tools, and cybersecurity technologies.
• Pilot new solutions and techniques that strengthen automation, visibility, and testing capabilities across IT and OT domains.

Education

Bachelor’s Degree in Computer Engineering or Information Systems

Qualifications

• Solid understanding of cybersecurity technologies, architectures, and security operations platforms (e.g., SIEM, SOAR, vulnerability management, EDR/XDR).
• Hands‑on experience (About 5 years) in penetration testing, vulnerability assessment, and red‑team methodologies.
• Proficiency in system integration and scripting (e.g., Python, PowerShell, Bash, API orchestration).
• Knowledge of industrial/OT cybersecurity standards (IEC 62443) and best practices for critical infrastructure.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Excellent communication skills in English and Italian, both written and spoken.
• Willingness to travel domestically and internationally for project activities.

• DOMAIN & BUSINESS ACUMEN - Applying a scientific approach and critical thinking in operations and solution development within area of expertise.
• FORESIGHT & INSIGHT - Context awareness adopting a systemic perspective and informed decision making.
• INTERPERSONAL INFLUENCE - Skills and strategies we use to interact effectively with others.
• PERSONAL EMPOWERMENT - Ownership for life, work and results, striving to grow professionally and personally.
• WORKPLACE DYNAMICS - Resourcefulness in shaping progress and working efficiently.

Compensation Data

The salary range and job grade for this position are defined based on objective, role‑related criteria and responsibilities in accordance with CCNL RINA (CNEL code I480).

The gross annual salary range foreseen is between €35,000 and €45,000 and will be finally defined on candidate’s professional experience, qualifications, competencies and overall alignment with the role. In addition, an annual variable compensation component is provided, based on both Company and individual performance objectives in accordance with the current policies and collective agreements. The overall compensation package is complemented by the Company's welfare.

RINA is a multinational company providing a wide range of services in the energy, marine, certification, infrastructure & mobility, industry, research & development sectors. Our business model covers the full process of project development, from concept to completion.

At RINA, we endeavor to create a work environment where every single person is valued and encouraged to develop new ideas. We provide equal employment opportunities and are committed to creating a workplace where everyone feels respected and safe from discrimination or harassment of any kind. We are also compliant to the Italian Law n. 68/99.