Junior Cyber Security Engineer

RINA is currently recruiting for a Junior Cyber Security Engineer to join its office in GENOA OR ROME, within the Operating Engine Division.

Mission

Junior personnel could have less than 5 years of experience in the field, but a technical academic background in computer engineering or computer science is required and an experience of at least 2/3 years is appreciated.

Key Accountabilities

The persons will be in charge of technical activities such as:

• Identify security risks within organizations and complex systems/architectures;
• Analyse, draft and review technical documentation pertaining IT and Communication systems;
• Manage changes in documents' versions and systems' configurations;
• Design security measures and provide recommendations or suggestions to improve security postures;
• Implement technical security measures also by means of hardening of target systems/devices based on identified security baselines or requirements;
• Provide support to Customers in cybersecurity related activities;
• It is possible some SW Code/Script development and/or network devices configuration also by means of automated configuration tools;
• According to Customer's needs, it could be possible to carry out VA/PT activities on involved systems/architectures.

Education

Bachelor’s Degree in Information Systems or Cyber Security

Qualifications

• Knowledge of security aspects of principal Operating Systems;
• Adequate knowledge of cryptographic algorithms (e.g. SHA, AES, CBC, ECB);
• Adequate knowledge of networking models;
• Adequate knowledge of programming languages (in particular Java, C/C++/C#, VB.Net, Python), their interfaces with principal DBMS, and their development environments;
• Strong problem-solving ability;
• Excellent verbal and written communication skills - Italian and English as a minimum;
• Flexibility and ability to multi-task in a fast-paced atmosphere;
• Availability to travel within the Country and abroad. Desired Requirements:
• Security Certifications: e.g. ISO270001 Qualified Lead Auditor, GIAC/GICSP or ISA62443 related certifications, CEH, OSCP, eJPT, PJPT, ISACA CISM/CISA/CRISC, ISC2 CISSP.
• Previous experience in performing VA/PT activities (also for personal interest/passion, e.g. CTF challenges);
• Knowledge of security tools/platforms such as: automated configuration tools (e.g. Ansible or Puppet), vulnerability assessment tools, penetration tests techniques and involved applications, cloud security, cyber threat intelligence, Mobile Threat Detection, Intrusion Prevention/Detection Systems (IPS/IDS), Endpoint Protection Platforms (EPP, but also EDR, MDR and XDR services), technologies related to code security analysis, Web Application Firewall (WAF), Security Orchestration Automation and Response (SOAR), Security Information and Event Management (SIEM) and Governance Risk Compliance (GRC).

Competencies

• FORESIGHT & INSIGHT - Context awareness adopting a systemic perspective and informed decision making.
• WORKPLACE DYNAMICS - Resourcefulness in shaping progress and working efficiently.
• INTERPERSONAL INFLUENCE - Skills and strategies we use to interact effectively with others.
• DOMAIN & BUSINESS ACUMEN - Applying a scientific approach and critical thinking in operations and solution development within area of expertise.
• PERSONAL EMPOWERMENT - Ownership for life, work and results, striving to grow professionally and personally.

Compensation Data

The salary range and job grade for this position are defined based on objective, role-related criteria and responsibilities in accordance with CCNL RINA (CNEL code I480).

The gross annual salary range foreseen is between €30.000 and €36.000 and will be finally defined on candidate’s professional experience, qualifications, competencies and overall alignment with the role. In addition, an annual variable compensation component is provided, based on both Company and individual performance objectives in accordance with the current policies and collective agreements. The overall compensation package is complemented by the Company's welfare.

RINA is a multinational company providing a wide range of services in the energy, marine, certification, infrastructure & mobility, industry, research & development sectors. Our business model covers the full process of project development, from concept to completion.

At RINA, we endeavor to create a work environment where every single person is valued and encouraged to develop new ideas. We provide equal employment opportunities and are committed to creating a workplace where everyone feels respected and safe from discrimination or harassment of any kind. We are also compliant to the Italian Law n. 68/99.