Senior Cyber Security Offensive Specialist (IT/OT) - Hybrid

MSC Cruises; Napoli; Hybrid; EUR 38,000 - 42,000; Full time

Benefits offered by this job

Meal vouchers

Health Insurance

Flexible working hours

Employee Assistance Programme

Job summary

MSC Cruises is seeking a Cyber Security Offensive Senior Specialist (IT/OT) based in Naples. You will independently execute complex IT offensive activities, including penetration tests on infrastructure, AD, cloud, web apps and APIs, and support adversary emulation and red/purple team exercises across IT and OT environments.

You will deliver technical reports with actionable remediation guidance, coordinate OT testing with engineering teams, and liaise with suppliers and stakeholders to drive

Qualifications

• Five to eight years of hands-on offensive cyber security experience.
• Experience with penetration testing, red/blue teams or security validation in enterprise or consulting environments.
• Proficiency with cloud solutions (Azure, AWS), networking, Active Directory, web apps and APIs.
• Knowledge of MITRE ATT&CK (Enterprise and ICS), OWASP, CVSS, CIS Controls; basic IEC 62443 and NIST SP 800-82 awareness.
• Exposure to OT/ICS, SCADA and maritime tech is a plus.
• Scripting to automate testing tasks (Python, PowerShell, Bash).

Responsibilities

• Support the execution of the offensive security plan in line with cyber strategy, risk appetite and standards.
• Apply offensive testing methodologies and rules of engagement; document lessons learned.
• Execute complex IT offensive activities including penetration tests on infrastructure, AD, cloud, web apps and APIs; support adversary emulation and red/purple team exercises.
• Perform IT technical rechecks to confirm remediation and provide evidence to close findings.
• Support OT offensive assessments delivered by third parties: contribute to scoping and on-site review of deliverables.
• Coordinate test windows and logistics with OT teams to ensure safe OT testing with minimal impact.
• Deliver clear technical reports with risk ratings and remediation guidance; review third-party offensive reports.
• Follow up remediation with system owners and track progress in ticketing systems.

Skills

Penetration testing

Red team

Purple team

Adversary emulation

Attack surface management

Security validation

Cloud platforms

Threat assessment

Burglar Suite knowledge

Python

PowerShell

Bash

Education

Degree in cyber security

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Impacket

Python

PowerShell

Bash

Job description

MSC Cruises is seeking a Cyber Security Offensive Senior Specialist (IT/OT) based in Naples. You will independently execute complex IT offensive activities, including penetration tests on infrastructure, AD, cloud, web apps and APIs, and support adversary emulation and red/purple team exercises across IT and OT environments.

You will deliver technical reports with actionable remediation guidance, coordinate OT testing with engineering teams, and liaise with suppliers and stakeholders to drive