Cybersecurity Assessment & Testing Engineer (JC_1600)

RINA is currently recruiting for a Cybersecurity Assessment & Testing Engineer (JC_1600) to join its office in ROME OR GENOA within the Operating Engine Division.

Mission The Cybersecurity Assessment & Testing Engineer is responsible for designing, deploying, testing, and optimizing cybersecurity technologies and defenses across IT and OT environments. This role bridges the gap between security engineering, threat simulation, and operations enablement—combining deep technical expertise, system integration skills, and offensive security knowledge to ensure that organizations build, validate, and maintain effective cyber resilience.

Key Accountabilities Cybersecurity Solution Integration & Automation

Design, deploy, and optimize cybersecurity platforms (e.g., SIEM/SOAR, vulnerability management, endpoint protection).

Implement automation workflows and integrations using APIs and scripting to enhance operational efficiency.

Extend product capabilities through custom development aligned with client and organizational needs.

Penetration Testing & Adversary Simulation

Conduct penetration testing and red‑team engagements across network, application, cloud, and OT environments.

Simulate real‑world attack scenarios—phishing, malware delivery, privilege escalation—to evaluate detection and response capabilities.

Provide remediation guidance based on realistic adversary behavior.

Vulnerability & Configuration Assessment

Perform vulnerability and configuration assessments across IT and industrial infrastructures.

Identify weaknesses in system architecture, misconfigurations, or insecure interfaces, and develop prioritized mitigation plans linked to business risk.

Industrial & Network Security Visibility

Assess security and monitoring capabilities within OT and industrial control systems (SCADA, PLCs, IIoT).

Deploy or leverage network visibility tools to identify insecure protocols and lateral movement paths.

Support improved segmentation, monitoring, and hardening of critical environments in accordance with IEC 62443 standards.

Security Hardening & Infrastructure Engineering

Support operating system and infrastructure hardening, patch management, and endpoint control implementation.

Ensure that deployed platforms are securely integrated within hybrid and on‑premises architectures.

Reporting, Advisory & Awareness Enablement

Develop clear and actionable reports describing vulnerabilities, exploitation techniques, and resolution strategies.

Present results to both technical and executive audiences, linking technical findings to operational and business implications.

Deploy and manage awareness and training platforms to reinforce organizational security culture.

Innovation & Continuous Improvement

Stay current on emerging threats, offensive tools, and cybersecurity technologies.

Pilot new solutions and techniques that strengthen automation, visibility, and testing capabilities across IT and OT domains.

Education Bachelor’s Degree in Computer Engineering or Information Systems

Qualifications

Solid understanding of cybersecurity technologies, architectures, and security operations platforms (e.g., SIEM, SOAR, vulnerability management, EDR/XDR).

Hands‑on experience (About 5 years) in penetration testing, vulnerability assessment, and red‑team methodologies.

Proficiency in system integration and scripting (e.g., Python, PowerShell, Bash, API orchestration).

Knowledge of industrial/OT cybersecurity standards (IEC 62443) and best practices for critical infrastructure.

Strong analytical, troubleshooting, and problem‑solving skills.

Excellent communication skills in English and Italian, both written and spoken.

Willingness to travel domestically and internationally for project activities.

Competencies

DOMAIN & BUSINESS ACUMEN - Applying a scientific approach and critical thinking in operations and solution development within area of expertise.

FORESIGHT & INSIGHT - Context awareness adopting a systemic perspective and informed decision making.

INTERPERSONAL INFLUENCE - Skills and strategies we use to interact effectively with others.

PERSONAL EMPOWERMENT - Ownership for life, work and results, striving to grow professionally and personally.

WORKPLACE DYNAMICS - Resourcefulness in shaping progress and working efficiently.

RINA is a multinational company providing a wide range of services in the energy, marine, certification, infrastructure & mobility, industry, research & development sectors. Our business model covers the full process of project development, from concept to completion.

At RINA, we endeavor to create a work environment where every single person is valued and encouraged to develop new ideas. We provide equal employment opportunities and are committed to creating a workplace where everyone feels respected and safe from discrimination or harassment of any kind. We are also compliant to the Italian Law n. 68/99.

#J-18808-Ljbffr