Cybersecurity Engineer II

ppJob ID: 54062Company: STERIS Italy S.r.l.Location: Pomezia, Rome (Roma), Lazio, ItalyJob Type: Full-TimeFLSA Status: No FLSA RequiredCategory: Research Development/ScientificIndustry: \"\"Posted Date: /ph3Position Summary /h3pWe are looking for a candidate that will join our Cybersecurity team in Pomezia (Rome).The Cybersecurity Engineer II is a specialist working within the STERIS RD controls department. The responsibilities include: analyzing software and hardware for potential vulnerabilities, creating work instructions for secure software maintenance, collaborating with product development teams for secure designs, conducting vulnerability assessments, and participating in incident response efforts. He/she will focus on creating and maintaining the security standards that contribute to the safety and integrity of critical healthcare technology. /ph3Duties /h3ulliReceive and analyze CVEs from open‑source sources, determine applicability to STERIS products, and collaborate with product teams to gather information needed for CVE impact and applicability assessments. /liliDevelop and track software bill of materials (SBOM), track vulnerabilities in SBOM, and work with product teams to remediate the vulnerabilities. /liliIdentify potential software security vulnerabilities and collaborate with product teams for remediation and planning. /liliAssist and support product security risk assessments, requirements analysis, and test methods. /liliEvaluate and execute product security testing including test planning, cases, and procedure development. /liliPerform vulnerability assessment and network scanning activities. /liliPerform internal fuzz testing to identify potential product vulnerabilities. /liliReproduce penetration testing findings to help product teams understand security issues and develop effective remediations. /liliImplement proposed security controls/methods to software embedded in STERIS products and other software applications for the assigned product(s) or project(s). /liliResearch new techniques and methods to enhance internal security testing practices and improve overall device security. /li /ulh3Duties - cont'd /h3ulliParticipate in improvement projects related to Cybersecurity technology, tools, and practices. /liliWork on cybersecurity assessments and documentation required for FDA 510(k) submissions, including but not limited to security risk management, threat. modeling, security architecture views, vulnerability management, and regulatory compliance deliverables. /liliRespond to Cybersecurity Questionnaires from STERIS Customers. /liliCreate and update FAQs, White Paper/Knowledge Articles based on commonly asked questions by Customers. /liliPerform other related and evolving job-related duties as assigned. /li /ulh3Education /h3pDegree Bachelor's Degree in Computer Science /ph3Required Experience Competencies /h3ulliBachelor’s degree in computer engineering, , Software Engineering, or Cybersecurity required. /liliAt least 3 years of direct experience in the field of cybersecurity, conducting cybersecurity risk assessments and security testing. /liliAt least 1 years’ experience in cybersecurity vulnerability assessment and software development lifecycle. /liliKnowledge in programming languages like Python, C++/C/C#, Java etc. /liliExperience in analyzing penetration test results and recommending corrective actions. /liliEnglish at level B2 minimun /li /ulh3Preferred Experience /h3ulliExperience with vulnerability scanning tools and threat intelligence services is a plus. /liliExperience using Threat Modeling tools and conducting penetration testing is desirable. /liliSoftware security certification such as SSCP or CISSP is desirable. /liliKnowledge of Windows and Linux operating systems and OS configurations is desirable. /liliExperience in writing software security requirements is desirable. /li /ulh3Skills /h3pSkills vulnerability assessmentpenetration testingsecurity risk assessmentsecurity testingsoftware vulnerability managementnetwork scanningfuzz testingsecurity architecturethreat modelingsecurity compliancefda 510(k) submissionspythonc++c++/c/c#javasecurity requirements analysistest planningtest case developmentsecurity controls implementationthreat intelligencevulnerability scanning toolsthreat modeling toolssoftware security certificationsscpcisspwindows oslinux ossoftware development lifecyclecross‑functional collaboration /ph3Compensation /h3pIn line with our commitment to transparency and equal pay, we provide the following information: /pulliSalary Range: 35.000 - 48.000NCBA: Chimica, Concia e Settori Accorpati, CONFAPI Bonus eligibility: This position is eligible for corporate bonus. /li /ulpSTERIS is a leading global provider of products and services that support patient care with an emphasis on infection prevention. /ppWE HELP OUR CUSTOMERS CREATE A HEALTHIER AND SAFER WORLD by providing innovative healthcare and life sciences products and services around the globe. /ppFor more information, visit .STERIS strives to be an Equal Opportunity Employer. /p /p #J-18808-Ljbffr