Cybersecurity Engineer

STACK EMEA; Siziano; In loco; EUR 50.000 - 70.000; Tempo pieno

Descrizione del lavoro

A leading cybersecurity firm in Lombardia is seeking a Cybersecurity Engineer to secure IT and OT environments. This role involves designing and implementing security solutions, managing incidents, and ensuring compliance with frameworks such as NIST and ISO 27001. Ideal candidates have strong cybersecurity expertise and relevant certifications.

Competenze

• Strong experience in cybersecurity, especially in IT and OT environments.
• Knowledge of cybersecurity frameworks like NIST, ISO 27001, and GDPR.
• Hands-on experience with security tools and vulnerability management.

Mansioni

• Design, implement, and manage cybersecurity solutions for IT and OT environments.
• Conduct risk assessments and penetration testing.
• Monitor network traffic for security threats and respond to incidents.

Conoscenze

IT and OT cybersecurity expertise

Risk assessments

Incident response

Network security

Analytical problem-solving

Compliance with cybersecurity frameworks

Formazione

Relevant cybersecurity certifications (CISSP, CISM, GICSP, CEH)

Strumenti

Firewalls

IDS/IPS

SIEM

Endpoint protection tools

Descrizione del lavoro

Overview

Job Purpose: The Cybersecurity Engineer plays a crucial role in securing both the Information Technology (IT) and Operational Technology (OT) environments in a data centers supporting our clients. This position is responsible for designing, implementing, and maintaining security solutions that protect critical IT and OT systems from cyber threats. The Cybersecurity Engineer will work closely with IT, OT, and compliance teams to ensure robust security measures are in place across the organization.

The Cybersecurity Engineer will work closely with IT, OT, and compliance teams to ensure robust security measures are in place across the organization. Key responsibilities include conducting risk assessments, deploying security tools, managing incident response, and ensuring compliance with industry regulations and cybersecurity frameworks. This role requires expertise in IT and OT security best practices, network security, endpoint protection, and industrial control system (ICS) security.

Candidates should have a strong technical background in cybersecurity, experience working with IT and OT environments, and the ability to develop and implement security policies and incident response strategies. The ideal candidate will be proactive, analytical, and capable of mitigating cybersecurity risks in complex, high-demand environments.

Responsibilities

• Design, implement, and manage cybersecurity solutions for IT and OT environments.
• Conduct risk assessments, vulnerability scans, and penetration testing for both IT and OT systems.
• Develop and enforce security policies, procedures, and best practices across the organization.
• Monitor network traffic and system activity for security threats, and respond to incidents.
• Secure IT and OT infrastructure, including firewalls, IDS/IPS, VPNs, and endpoint protection.
• Ensure compliance with cybersecurity frameworks such as NIST, ISO 27001, IEC 62443, and NERC CIP.
• Collaborate with IT and OT teams to integrate security into network and system architecture.
• Manage security audits, log analysis, and forensic investigations.
• Provide cybersecurity awareness training and guidance to internal teams.
• Assist in the development and implementation of disaster recovery and incident response plans.
• Stay updated on emerging cyber threats and new security technologies.

Qualifications

• Strong experience in cybersecurity, with expertise in both IT and OT environments.
• Knowledge of cybersecurity frameworks and compliance regulations (e.g., NIST, ISO 27001, IEC 62443, GDPR, NERC CIP).
• Hands-on experience with security tools such as firewalls, IDS/IPS, SIEM, antivirus, and endpoint protection.
• Proficiency in risk assessments, vulnerability management, and penetration testing.
• Experience securing networks, cloud environments, and industrial control systems (ICS).
• Strong troubleshooting skills and the ability to analyze complex security incidents.
• Familiarity with IT and OT security protocols, including Modbus, DNP3, and OPC-UA.
• Knowledge of scripting and automation tools (Python, PowerShell, Bash) is a plus.
• Relevant cybersecurity certifications (CISSP, CISM, GICSP, CEH, or equivalent) are highly desirable.
• Excellent problem-solving, communication, and collaboration skills.