Senior Application and Cloud Security Engineer - Automotive Business

SKF Group; Airasca; In loco; EUR 60.000 - 80.000; Tempo pieno

Descrizione del lavoro

A leading automotive company seeks a Senior Application and Cloud Security Engineer in Airasca, Italy. This strategic role involves defining DevSecOps frameworks and ensuring secure cloud applications while collaborating with diverse teams. The ideal candidate has proven expertise in cloud security architecture and enjoys making a difference in a diverse environment. Candidates must be fluent in English and hold a degree in Computer Science or a related field. Join us to influence security practices in a dynamic automotive market.

Servizi

Freedom and responsibility over work

Healthy work-life balance

Diverse work environment

Competenze

• Proven experience in DevSecOps, application security and cloud security architecture.
• Hands-on expertise with CI/CD security integration, IaC tools and automation frameworks.
• Strong knowledge of cloud platforms (Azure, AWS) and security technologies.

Mansioni

• Define and implement a robust DevSecOps framework for CI/CD pipelines.
• Ensure application teams follow secure coding standards.
• Conduct security assessments and vulnerability remediation.

Conoscenze

DevSecOps

Application Security

Cloud Security Architecture

CI/CD Security Integration

Excellent Communication Skills

Threat Modelling

Formazione

Degree in Computer Science or Cybersecurity

Strumenti

Azure

AWS

WAF

IAM

CSPM

IaC Tools

Descrizione del lavoro

Senior Application and Cloud Security Engineer – Automotive Business

In September of 2024, SKF announced the separation of its Automotive business, with the objective to build two world‑leading businesses. The role you are applying for will be part of the automotive business. This means you will have the opportunity to be a part of shaping a new company aimed at meeting the needs of the transforming global automotive market.

Are you passionate about ensuring the security of applications and cloud infrastructure? Do you thrive on establishing global security requirements for modern cloud applications? Join us as a security leader who will champion DevSecOps practices and embed security into every stage of application development and cloud operations. This role is highly strategic and hands‑on, driving secure design, automation, and compliance across global environments. You will work closely with development, operations and architecture teams to ensure security is seamlessly integrated into CI/CD pipelines and cloud platforms.

Key responsibilities

• DevSecOps Enablement: Define and implement a robust DevSecOps framework, including security policies, automation, and guardrails for CI/CD pipelines.
• Secure SDLC Integration: Ensure application teams follow secure coding standards and SSDLC practices, embedding security checks into development workflows.
• Application Security: Conduct security assessments, threat modelling, and vulnerability remediation for applications and APIs.
• Cloud Security Architecture: Design and enforce secure configurations for cloud platforms (Azure, AWS), including identity, access and network security.
• Security Automation: Develop tools and workflows to automate security controls, compliance checks and vulnerability management.
• Governance & Compliance: Align security practices with global standards (ISO 27001, NIST CSF) and regulatory requirements, reporting on KPIs and compliance status.
• Incident Handling: Support major incident response activities and contribute to root‑cause analysis for continuous improvement.

Requirements

• Proven experience in DevSecOps, application security and cloud security architecture.
• Hands‑on expertise with CI/CD security integration, IaC tools and automation frameworks.
• Strong knowledge of cloud platforms (Azure, AWS) and security technologies (WAF, IAM, CSPM).
• Familiarity with Zero Trust principles, threat modelling and compliance frameworks.
• Excellent communication skills to influence and educate stakeholders.
• Ability to act decisively under pressure and drive secure development practices.
• Degree in Computer Science, Cybersecurity or equivalent experience.
• Fluent in English (written and spoken).

SKF is committed to creating a diverse environment, and we firmly believe that a diverse workforce is essential for our continued success. Therefore, we only focus on your experience, skills and potential. Come as you are – just be yourself. #weareSKF

Our offer

We offer an opportunity to make a difference in the Automotive Business, working together with a highly motivated team that shares a mission to protect and secure, as well as contribute to the greater good of the company. You will have considerable influence over how and when you work, enjoying both freedom and responsibility to maintain a healthy work‑life balance.

Some additional information

Location: While EMEA is our preferred location for this position, we are open to discussing other Automotive locations for the right candidate (with a general preference for the candidate to be hired on a local contract). Some of our preferred locations in EMEA are Warsaw and Poznan – Poland, Airasca – Italy, Tudela – Spain and Istanbul – Turkey.

This position is a global role and reports to Ayoub Elyasir, Automotive Head of Security Engineering. For questions on the role, please contact Ayoub via Teams or email.

For questions regarding the recruitment process, please contact Stina Scheller, Talent Acquisition Automotive, via email [e-mail] (Please note that we do not accept applications via email).

Is this you? If the answer is yes, please submit your application, along with your CV in English, by December 18th 2025.