Information Security - Detection & Response

EssilorLuxottica; Lombardia; On-site; EUR 35,000 - 50,000; Full time

Benefits offered by this job

Learning platform access

Health insurance

Meal vouchers

Employee discounts

Disconnect program

Job summary

EssilorLuxottica in Italy seeks an Information Security professional to strengthen cyber detection and response capabilities. You will monitor security events, support incident triage, and drive remediation across geographies and functions.

The role requires a strong operational mindset, experience with SOC operations and SIEM, and the ability to translate technical findings into clear business actions. A bachelor’s degree and security certifications are highly desired.

Qualifications

• Bachelor degree in information security or related field is strongly desired.
• Professional certifications such as CISSP, CISM, GCIH, GCIA, GCFA or Security+ are strongly desired.
• Experience coordinating security monitoring and incident response activities.
• Knowledge of NIST, ISO 27001 and MITRE ATT&CK frameworks.

Responsibilities

• Coordinate monitoring of security events across the environment.
• Support incident triage, investigation and escalation with stakeholders.
• Drive containment, eradication and recovery actions during incidents.
• Contribute to detection use cases, playbooks and procedures.
• Prepare incident updates and management reporting to senior stakeholders.

Skills

Security monitoring

Incident response

Threat analysis

SOC operations

SIEM platforms

Communication skills

English fluency

Education

Bachelor's degree in Information Security

CISSP

CISM

GCIH

Tools

SIEM platforms

EDR solutions

Threat intelligence

Log analysis

Job description

If you’ve worn a pair of glasses, we’ve already met. We are a global leader in the design, manufacture, and distribution of ophthalmic lenses, frames, and sunglasses. We offer our industry stakeholders in over 150 countries access to a global platform of high-quality vision care products (such as the Essilor brand, with Varilux, Crizal, Eyezen, Stellest and Transitions), iconic brands that consumers love (such as Ray-Ban, Oakley, Persol, Oliver Peoples, Vogue Eyewear and Costa), as well as a network that offers consumers high-quality vision care and best-in-class shopping experiences (such as Sunglass Hut, LensCrafters, Salmoiraghi & Viganò and the GrandVision network), and leading e-commerce platforms.

Contract: Permanent/Full time

Join our global community of over 190,000 dedicated employees around the world in driving the transformation of the eyewear and eyecare industry.

Discover more by following us on LinkedIn !

Your #FutureInSight with EssilorLuxottica Are you willing to pioneer new frontiers, foster inclusivity and collaboration, embrace agility, ignite passion, and make a positive impact on the world? Join us in redefining the boundaries of what’s possible.

Your role

In this role you will report directly to an Information Security Manager and you will be responsible for strengthening the Company’s cyber detection and response capabilities. You will coordinate the monitoring of security events, support incident triage and investigation, drive response and containment activities with IT and business stakeholders, and contribute to the continuous improvement of use cases, playbooks, reporting and incident readiness. The role requires a strong operational security mindset, the ability to work across geographies and functions, and a practical approach to translating security alerts and incidents into clear actions and remediation plans.

Main Responsibilities

• Security monitoring and detection - Coordinate the monitoring of security events and alerts across the Company’s environment, ensuring timely identification of potential threats and suspicious activities.
• Incident triage and investigation - Support the analysis, validation and prioritization of security incidents, working with IT Security, SOC providers and relevant stakeholders to determine impact, scope and required actions.
• Response coordination and containment - Coordinate response activities during security incidents, supporting containment, eradication and recovery actions in alignment with internal processes and escalation paths.
• Use case, playbook and process improvement - Contribute to the definition and continuous improvement of detection use cases, incident response playbooks, escalation criteria and operational procedures.
• Reporting and remediation follow-up - Prepare clear incident updates and management reporting, track remediation actions, and elevate risks, delays and recurring weaknesses to the CISO / relevant stakeholders.

Main Requirements

• Bachelor’s degree in Information Security, Information Technology, Computer Science, Engineering, or similar strongly desired.
• Professional information security certifications such as CISSP, CISM, GCIH, GCIA, GCFA, Security+ or similar are strongly desired.
• Knowledge of security monitoring, incident detection, incident response, threat analysis, endpoint security, network security, identity and access management, vulnerability management and data protection.
• Demonstrated experience in coordinating security monitoring and incident response activities, including alert triage, investigation support, containment coordination, remediation tracking and stakeholder communication.
• Experience with SOC operations, SIEM platforms, endpoint detection and response solutions, threat intelligence, log analysis and common attack techniques; understanding of security frameworks such as NIST, ISO 27001 and MITRE ATT&CK.
• Knowledge of incident response lifecycle, escalation models, crisis management principles, evidence handling and post-incident review practices.
• Knowledge of relevant Information Security / Data Protection laws and regulations, including requirements that may impact incident management and notification processes.
• Ability to translate technical security findings into clear business-oriented messages, actions and priorities for technical and non-technical stakeholders.
• Knowledge of core IT processes, including infrastructure operations, application management, change management, access management and service management.
• Project management skills, teamwork, individual accountability and ability to coordinate multiple stakeholders during time-sensitive situations.
• Proven ability to communicate effectively at all levels, including operational teams, management and external providers, in both technical and non-technical language.
• English fluent

What’s In It For You

In EssilorLuxottica, you are not defined just by your job title. Each career adventure is unique; have a glimpse of some of the benefits you will enjoy as a successful candidate:

• Access to our cutting-edge learning platform, Leonardo, and personalized development programs to help you grow professionally and personally.
• Enjoy flexible work conditions, health insurance coverage, ticket restaurants, internal rooftop canteen.
• Access special offers for employees on a vast range of eyewear, eye care products, and fashion apparel, so you can enjoy our world-class brands firsthand.
• Enjoy our “Disconnect Program” a holistic approach to work-life balance, including initiatives for mental health, yoga, jogging sessions, and more, designed to help you recharge and stay healthy.

Recruiting process

Our recruitment process may vary; If you are selected, you will be contacted by our recruiters to guide you through the specific steps for your application.

Salary Package

• Annual Gross Salary: 35.000 Eur – 50.000 Eur
• Comprehensive Benefits Package:
  • Supplementary Health insurance coverage
  • Supplementary Pension Plan
  • Access to the EssilorLuxottica Corporate Welfare Catalog
  • Transportation – Discounted pass
  • Meal Vouchers as per company guidelines
  • Exclusive employee discounts on company products
  • Company-provided laptop and mobile phone

Our Diversity, Equity and Inclusion commitment

We are committed to creating an inclusive environment for all employees. We celebrate diversity and provide equal opportunities to all, regardless of race, gender, ethnicity, religion, disability, sexual orientation, or any other characteristic that makes us unique.