Senior Platform Cyber Security Engineer

Experteer OverviewAs Senior Platform Security Engineer, you will strengthen our security posture across platforms, infrastructure, and workflows. You’ll bridge security operations, governance, risk, and product security to safeguard systems, clients, and IP. You will lead hands‑on technical tasks while coordinating with Product, Infra, and Security Operations teams. This role offers growth within a dedicated security function and exposure to both operations and product development in the Italian market.Retribuzione / BenefitsSupport design and execution of the information security risk management frameworkEnsure compliance with NIS2, DORA and ISO27001-related obligations with Legal, Risk and ITMaintain and improve security policies, standards and control documentationAssist with audits, due diligence and exception managementSupport DevSecOps and secure design in product/engineering teamsAct as escalation point during major incidents or zero‑day threatsLead detection and response improvements for the entityServe as senior incident responder for emerging threatsCollaborate with infrastructure, network and cross‑functional teams to contain and remediate incidentsPerform root cause analysis and forensic investigations as neededExpand logging and monitoring coverage to enhance system visibilityMaintain and test incident response runbooks, containment strategies and escalation protocolsLead end‑to‑end vulnerability management for ION Markets systemsSupport security architecture reviews for developed systemsMay involve overnight, weekend and on‑call activitiesResponsabilitàItalian and English fluencyDegree/diploma/certifications in a technology‑related field or relevant experienceCertifications such as Security+, OSCP, CCSP, CEH, GCIH, GMON are highly desiredUp to ~7 years of information security experience with hands‑on operations and compliance backgroundFundamental programming/scripting capabilities (e.G., Python, PowerShell, Bash)Familiarity with NIS2, DORA and external regulationsStrong understanding of ISO27KIndependent, team‑oriented with strong communicationAbility to own tasks and manage time effectivelyEndpoint security concepts, networking, cryptography, forensics basicsExperience with security technologies (EDR, SIEM, DLP, CASB, UEBA, IDS/IPS, firewalls, IAM/PIM/PAM, vulnerability management)#J-18808-Ljbffr