Sr Cloud Security Engineer - Turin, Italy Turin, Torino, Italy Software Engineering

Qualcomm; Torino; In loco; EUR 65.000 - 85.000; Tempo pieno

Vantaggi offerti da questo lavoro

Flexible working hours

Training budget

Healthy snacks

Seasonal celebrations

Descrizione del lavoro

Qualcomm is looking for a Sr Cloud Security Engineer in Turin, Italy. You will be responsible for securing Arduino Software and Cloud platforms while educating the team about security best practices. The role involves designing security solutions for AWS, implementing CI/CD pipelines, and monitoring for security incidents.

The ideal candidate has a Bachelor's or Master's degree in a related field and at least 6 years of relevant experience. The position provides a competitive salary, flexible working conditions, and a dynamic work environment.

Competenze

• 6+ years of experience in Software Engineering or related work.
• 5+ years of experience in security engineering or comparable experience.
• Experience with applied cryptography including PKI, TLS.

Mansioni

• Ensure data security at the highest standards.
• Provide security guidance on new projects and technologies.
• Collaborate with development teams to integrate security controls.

Conoscenze

Programming Languages (C, C++, Java, Python)

Cloud Security

Containerisation / Orchestration

Vulnerability Management

Analytical skills

Formazione

Bachelor's degree in Engineering, Information Systems, Computer Science

Master's degree or PhD in relevant field

Strumenti

AWS Security Hub

Docker

Kubernetes

Git/GitHub

Descrizione del lavoro

## Sr Cloud Security Engineer - Turin, ItalyTurin, Torino, ItalyApply NowFind out how well you match with this jobJob ID3088350## **Company:**Qualcomm Europe, Inc. Italy Branch Office## **Job Area:**Engineering Group, Engineering Group > Software Engineering**General Summary:**## Arduino’s mission is to enable people to enhance their lives through accessible open-source electronics and digital technologies. Since 2005, millions of people from around the world, starting from young kids to university students and on to people involved in every imaginable profession, have been using Arduino to innovate in the fields of music, games and toys, smart homes, farming, autonomous vehicles, and many more.We are now looking for a Sr Cloud Security Engineer to join our team of expert professionals eager to share their knowledge and be part of this vibrant company’s journey towards the democratization of technology. You will be responsible for ensuring the security of Arduino Software and Cloud platforms and also for fostering awareness inside the company about security best practices.Arduino is a technology-driven company, and you will have the opportunity to join a passionate and collaborative team within a multinational and driven organization.****What We Offer***** A challenging career path in a rapidly growing company with a modern vision and talented teams.* A competitive salary (and benefits) that values people's skills and experience.* A young and inspiring work environment that encourages diversity and cultural exchange.* Individual growth objectives with a dedicated budget for learning/training.* Flexible working hours and working locations; we value work-life balance!* A meaningful work opportunity in a mission-driven company committed to empowering people around the world.**And if you live near one of our offices...*** Ping pong and football tournaments (sport or gym benefit is also included for everyone!).* Seasonal celebrations, happy hours, and everyday drinks and snacks at the office.* Sunny rooftop lunch breaks and hamacas for relaxation and concentration.****What you'll work on***** Make sure that the data we are trusted to protect is secured to the highest standards;* Help the Development and DevOps teams on Security Best Practices;* Provide security guidance on a constant stream of new projects and technologies;* Provide subject matter expertise on architecture, authentication and system security* Design, implement, and manage security solutions for AWS environment through IaC technologies;* Implement and manage standard AWS security tools, including but not limited to AWS Security Hub, AWS GuardDuty, Inspector, CloudTrail, WAF, KMS, Config, IAM Access Analyzer.* Building secure CI/CD pipelines adopting DevSecOps principles and AI Security Agent technologies* Build internal tools for detecting and responding to security problems and incidents* Monitor cloud environments for security incidents and anomalies, and respond to suspected incidents in a timely manner;* Collaborate with Infrastructure and Application development teams to integrate security controls in the cloud using standardized configuration tools;* Work with product development teams to implement security controls that comply with recognized regulatory, compliance, and standards such as RED, EN18031, and CRA.* Make informed prioritization decisions by assessing risk across vulnerability management activities, including CVE triage, CVSS scoring, coordinated disclosure, and collaboration with external reporters* Ensure alignment and compliance with ISO 27001 and provide definition of Security policy for all the organization, including Training of company employees on security policy.### **Minimum Qualifications:**• Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 6+ years of Software Engineering or related work experience. OR Master's degree in Engineering, Information Systems, Computer Science, or related field and 5+ years of Software Engineering or related work experience. OR PhD in Engineering, Information Systems, Computer Science, or related field and 4+ years of Software Engineering or related work experience. • 3+ years of work experience with Programming Language such as C, C++, Java, Python, etc.****What you bring***** Bachelor or Master Degree in Computer Science or related field, or equivalent experience;* 5+ years of experience in security engineering or comparable experience (DevOps, SRE);* Experience in Containerisation / Orchestration with Docker and Kubernetes;* Strong, well-rounded background in host, network, and cloud security;* Experience in designing and defining secure cloud native systems;* Experience with applied cryptography including PKI, TLS, and key management;* Expertise with modern programming languages and software versioning tools (GIT/GitHub);* Knowledge of relevant security compliance, standards and regulations (e.g. ISO, SOC, NIST, GDPR, CIS, CRA);* Knowledge of internet security issues and the threat landscape (e.g. OWASP, STRIDE, MITRE ATT&CK, CWE);* Experience with security monitoring, incident detection and response to suspected incidents in a timely manner;* Good experience with Vulnerability Management, Threat modeling, Risk Assessment and Risk Mitigation in cloud, web or IoT ecosystem.;* Good written and oral communication skills in English;* Ability to work with cross-functional teams (including developers, engineers, and IT) and to explain technical concepts to non-technical audiences (eg training for employees);* Skilled in problem-solving;* Analytical skills; result-oriented and continuous learning approach.****Bonus Points***** Previous experience working with Infrastructure and DevOps* Working experience with cloud providers like AWS or GCP* Working knowledge of Cloudflare, Auth0, Datadog* Experience with Arduino or other microcontrollers* Experience with hardware security* Experience with the Go programming languageIf you're excited about this role or about our company but your experience doesn't align perfectly with the points outlined above, we strongly encourage you to apply anyway. Show us the boards you designed! If, in any case, we feel you don’t fit for this job, we may have something else for you!\*References to a particular number of years experience are for indicative purposes only. Applications from candidates with equivalent experience will be considered, provided that the candidate can demonstrate an ability to fulfill the principal duties of the role and possesses the required competencies.Qualcomm is an equal opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e-mail [e-mail] or call Qualcomm's toll-free number found here. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities. (Keep in mind that this email address is used to provide reasonable accommodations for individuals with disabilities. We will not respond here to requests for updates on applications or resume inquiries).Qualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law.**To all Staffing and Recruiting Agencies**: Our Careers Site is only for individuals seeking a job at Qualcomm. Staffing and recruiting agencies and individuals being represented by an agency are not authorized to use this site or to submit profiles, applications or resumes, and any such submissions will be considered unsolicited. Qualcomm does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to our jobs alias, Qualcomm employees or any other company location. Qualcomm is not responsible for any fees related to unsolicited resumes/applications.If you would like more information about this role, please contact Qualcomm Careers.