Application Security Engineer
Pubblicato il 03-10-2026 - TXT GROUP in Roma
Questa posizione è in TXT Group
Il processo di selezione sarà interamente gestito TXT Group.
--
HSPI S.p.A., part of TXT Group, is looking for a Application Security Engineer to join its team at the Rome office (Cinecittà area).
Key Responsibilities
Vulnerability Assessment & Penetration Testing
- Provide operational support in performing Vulnerability Assessments and Penetration Tests on web applications, IT infrastructures, cloud environments, and containerized platforms (Kubernetes/AKS).
Reporting & Compliance
- Support the preparation of detailed technical reports (Technical Deep Dive Reports), classify vulnerabilities according to internationally recognized frameworks (CVSS v4.0, MITRE ATT&CK;, OWASP), and verify the effectiveness of implemented security controls through remediation retesting activities.
Threat Modeling
- Support the analysis of application architectures using methodologies such as STRIDE (Microsoft Threat Modeling Tool), identifying threats, assessing risks, and producing Threat Modeling and Risk Assessment documentation.
Secure Code Review
- Analyze source code using Static Application Security Testing (SAST) tools and manual code review techniques to identify logical vulnerabilities, programming flaws, and security weaknesses.
Required Technical Skills
- Practical knowledge of the main categories of application vulnerabilities (OWASP, CWE).
- Familiarity with leading security tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, and container/cloud security auditing tools including Trivy, Kube-bench, and Prowler.
- Basic programming and scripting skills (Python, Bash, Go, or knowledge of major web and object-oriented programming languages) to support secure code review activities.
- Bachelor's or Master's degree in Computer Science, Computer Engineering, or a related field.
Preferred Qualifications
- Previous experience, including academic or internship experience, with cloud architectures (Azure/AWS) and Docker/Kubernetes environments.
-