Cybersecurity Assessment & Testing Engineer

• Cybersecurity Assessment & Testing Engineer (JC_1600)
• City: Roma
• Division: Operating Engine
• Level of experience: Intermediate
• RINA is currently recruiting for a
• Cybersecurity Assessment & Testing Engineer (JC_1600) to join its office in
• ROME within the
• Operating Engine

Division.

Mission

The Cybersecurity Assessment & Testing Engineer is responsible for designing, deploying, testing, and optimizing cybersecurity technologies and defenses across IT and OT environments.

This role bridges the gap between security engineering, threat simulation, and operations enablement—combining deep technical expertise, system integration skills, and offensive security knowledge to ensure that organizations build, validate, and maintain effective cyber resilience.

• Key Accountabilities
• Cybersecurity Solution Integration & Automation
• Design, deploy, and optimize cybersecurity platforms (e. g., SIEM/SOAR, vulnerability management, endpoint protection).
• Implement automation workflows and integrations using APIs and scripting to enhance operational efficiency.
• Extend product capabilities through custom development aligned with client and organizational needs.
• Penetration Testing & Adversary Simulation
• Conduct penetration testing and red‑team engagements across network, application, cloud, and OT environments.
• Simulate real‑world attack scenarios—phishing, malware delivery, privilege escalation—to evaluate detection and response capabilities.
• Provide remediation guidance based on realistic adversary behavior.
• Vulnerability & Configuration Assessment
• Perform vulnerability and configuration assessments across IT and industrial infrastructures.
• Identify weaknesses in system architecture, misconfigurations, or insecure interfaces, and develop prioritized mitigation plans linked to business risk.
• Industrial & Network Security Visibility
• Assess security and monitoring capabilities within OT and industrial control systems (SCADA, PLCs, IIo T).
• Deploy or leverage network visibility tools to identify insecure protocols and lateral movement paths.
• Support improved segmentation, monitoring, and hardening of critical environments in accordance with IEC 62443 standards.
• Security Hardening & Infrastructure Engineering
• Support operating system and infrastructure hardening, patch management, and endpoint control implementation.
• Ensure that deployed platforms are securely integrated within hybrid and on‑premises architectures.
• Reporting, Advisory & Awareness Enablement
• Develop clear and actionable reports describing vulnerabilities, exploitation techniques, and resolution strategies.
• Present results to both technical and executive audiences, linking technical findings to operational and business implications.
• Deploy and manage awareness and training platforms to reinforce organizational security culture.
• Innovation & Continuous Improvement
• Stay current on emerging threats, offensive tools, and cybersecurity technologies.
• Pilot new solutions and techniques that strengthen automation, visibility, and testing capabilities across IT and OT domains.

Education

Bachelor’s Degree in Computer Engineering or Information Systems

Qualifications

• Solid understanding of cybersecurity technologies, architectures, and security operations platforms (e. g., SIEM, SOAR, vulnerability management, EDR/XDR).
• Hands‑on experience (About 5 years) in penetration testing, vulnerability assessment, and red‑team methodologies.
• Proficiency in system integration and scripting (e. g., Python, Power Shell, Bash, API orchestration).
• Knowledge of industrial/OT cybersecurity standards (IEC 62443) and best practices for critical infrastructure.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Excellent communication skills in English and Italian, both written and spoken.
• Willingness to travel domestically and internationally for project activities.
• DOMAIN & BUSINESS ACUMEN - Applying a scientific approach and critical thinking in operations and solution development within area of expertise.
• FORESIGHT & INSIGHT - Context awareness adopting a systemic perspective and informed decision making.
• INTERPERSONAL INFLUENCE - Skills and strategies we use to interact effectively with others.
• PERSONAL EMPOWERMENT - Ownership for life, work and results, striving to grow professionally and personally.
• WORKPLACE DYNAMICS - Resourcefulness in shaping progress and working efficiently.

Compensation Data

The salary range and job grade for this position are defined based on objective, role‑related criteria and responsibilities in accordance with

CCNL RINA

(CNEL code I480).

The gross annual salary range foreseen is between

€35,000 and €45,000 and will be finally defined on candidate’s professional experience, qualifications, competencies and overall alignment with the role.

In addition, an annual variable compensation component is provided, based on both Company and individual performance objectives in accordance with the current policies and collective agreements.

The overall compensation package is complemented by the Company's welfare.

RINA is a multinational company providing a wide range of services in the energy, marine, certification, infrastructure & mobility, industry, research & development sectors.

Our business model covers the full process of project development, from concept to completion.

At RINA, we endeavor to create a work environment where every single person is valued and encouraged to develop new ideas.

We provide equal employment opportunities and are committed to creating a workplace where everyone feels respected and safe from discrimination or harassment of any kind.

We are also compliant to the Italian Law n. 68/99.

#J-18808-Ljbffr