Sr Security Engineer

ph3Company /h3pQualcomm Europe, Inc. Italy Branch Office /ph3Job Area /h3pEngineering Group, Engineering Group Software Engineering /ph3General Summary /h3pArduino’s mission is to enable people to enhance their lives through accessible open-source electronics and digital technologies. Since 2005, millions of people from around the world—from young kids to university students and to professionals in diverse fields—have been using Arduino to innovate in music, games and toys, smart homes, farming, autonomous vehicles, and many more. We are looking for a Sr Cloud Security Engineer to join our team of expert professionals eager to share their knowledge and to be part of this vibrant company’s journey toward the democratization of technology. The role includes ensuring the security of Arduino Software and Cloud platforms and fostering awareness inside the company about security best practices. /ph3What We Offer /h3ulliA challenging career path in a rapidly growing company with a modern vision and talented teams. /liliA competitive salary (and benefits) that values people's skills and experience. /liliA young and inspiring work environment that encourages diversity and cultural exchange. /liliIndividual growth objectives with a dedicated budget for learning/training. /liliFlexible working hours and working locations; we value work‑life balance. /liliA meaningful work opportunity in a mission‑driven company committed to empowering people around the world. /liliPing pong and football tournaments (sport or gym benefit is also included for everyone). /liliSeasonal celebrations, happy hours, and everyday drinks and snacks at the office. /liliSunny rooftop lunch breaks and hamacas for relaxation and concentration. /li /ulh3What You’ll Work On /h3ulliEnsure that the data we are trusted to protect is secured to the highest standards. /liliHelp the Development and DevOps teams with Security Best Practices. /liliProvide security guidance on a constant stream of new projects and technologies. /liliProvide subject‑matter expertise on architecture, authentication, and system security. /liliDesign, implement, and manage security solutions for AWS environments through IaC technologies. /liliImplement and manage standard AWS security tools, including AWS Security Hub, GuardDuty, Inspector, CloudTrail, WAF, KMS, Config, and IAM Access Analyzer. /liliBuild secure CI/CD pipelines adopting DevSecOps principles and AI Security Agent technologies. /liliBuild internal tools for detecting and responding to security problems and incidents. /liliMonitor cloud environments for security incidents and anomalies, and respond to suspected incidents in a timely manner. /liliCollaborate with Infrastructure and Application development teams to integrate security controls in the cloud using standardized configuration tools. /liliWork with product development teams to implement security controls that comply with recognized regulatory, compliance, and standards such as R2, EN18031, and CRA. /liliMake informed prioritization decisions by assessing risk across vulnerability management activities, including CVE triage, CVSS scoring, coordinated disclosure, and collaboration with external reporters. /liliEnsure alignment and compliance with ISO27001 and provide the definition of Security policy for the organization, including training of company employees on security policy. /li /ulh3Minimum Qualifications /h3ulliBachelor’s degree in Engineering, Information Systems, Computer Science, or related field and 6+ years of Software Engineering or related work experience. /liliMaster’s degree in Engineering, Information Systems, Computer Science, or related field and 5+ years of Software Engineering or related work experience. /liliPhD in Engineering, Information Systems, Computer Science, or related field and 4+ years of Software Engineering or related work experience. /lili3+ years of work experience with a programming language such as C, C++, Java, Python, etc. /li /ulh3What You Bring /h3ulliBachelor or Master Degree in Computer Science or related field, or equivalent experience. /lili5+ years of experience in security engineering or comparable experience (DevOps, SRE). /liliExperience in containerisation / orchestration with Docker and Kubernetes. /liliStrong, well‑rounded background in host, network, and cloud security. /liliExperience in designing and defining secure cloud native systems. /liliExperience with applied cryptography including PKI, TLS, and key management. /liliExpertise with modern programming languages and software versioning tools (GIT/GitHub). /liliKnowledge of relevant security compliance, standards and regulations (ISO, SOC, NIST, GDPR, CIS, CRA). /liliKnowledge of internet security issues and the threat landscape (OWASP, STRIDE, MITRE ATTCK, CWE). /liliExperience with security monitoring, incident detection and response to suspected incidents in a timely manner. /liliGood experience with Vulnerability Management, Threat modeling, Risk Assessment and Risk Mitigation in cloud, web or IoT ecosystems. /liliGood written and oral communication skills in English. /liliAbility to work with cross‑functional teams (including developers, engineers, and IT) and to explain technical concepts to non‑technical audiences (e.g., training for employees). /liliSkilled in problem‑solving. /liliAnalytical skills; result‑oriented and continuous learning approach. /li /ulh3Bonus Points /h3ulliPrevious experience working with Infrastructure and DevOps. /liliWorking experience with cloud providers like AWS or GCP. /liliWorking knowledge of Cloudflare, Auth0, Datadog. /liliExperience with Arduino or other microcontrollers. /liliExperience with hardware security. /liliExperience with the Go programming language. /li /ulh3Equality and Accessibility /h3pQualcomm is an equal‑opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e‑mail disability‑ or call Qualcomm’s toll‑free number. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able to participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities. /ppQualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law. /p /p #J-18808-Ljbffr