12 ott - Reggio Emilia
Barilla
Overview
In this role, you will operate and improve Barilla’s global cybersecurity environment, spanning hybrid cloud, on-premises, and SaaS. You’ll perform detection engineering, threat hunting, and incident response, while guiding external services and ensuring compliance with NIS2 and ISO standards. You’ll collaborate with partners to deliver secure, resilient IT/OT operations and contribute to risk-based security improvements. This position offers a meaningful chance to shape Barilla’s cybersecurity posture at a global scale.
Responsabilità
- Operate and continuously improve cybersecurity technologies and services across hybrid cloud, on-premises, and SaaS environments
- Manage lifecycle, health, and telemetry for controls and CTI integrations
- Lead detection engineering, threat hunting, IoC operationalisation, and evidence-led incident response
- Provide input to service sourcing and manage delivery by managed services and providers
- Collaborate with third-party partners to ensure aligned security requirements and SLAs/KPIs
- Perform risk-based vulnerability, exposure, and secure-configuration management for corporate scope
- Drive security-by-design and supplier security reviews, including privacy-by-design coordination
- Support identity and access management and investigate anomalous or high-risk access
- Maintain procedures, playbooks, and readiness for governance, risk management, and NIS2 incidents
- Analyze cybersecurity performance and communicate risk with actionable improvements
Requisiti fondamentali
- Bachelor's degree in Cybersecurity/Information Security/Computer Science or related field (or equivalent hands-on experience)
- Typically at least 2 years of relevant cybersecurity operations/engineering experience
- Professional English fluency; Italian mandatory
- Hands-on experience with Microsoft security platforms (Azure/Entra ID/Microsoft 365 Defender XDR/Sentinel)
- Scripting or automation experience (PowerShell or Python)
- Working knowledge of ISO/IEC 27001/27002, NIST CSF 2.0, NIS2
- Knowledge of CTI/TIP (MISP, STIX/TAXII), IAM/PAM, vulnerability management, and cloud controls (plus)
- Collaborative and cross-functional communication
- Analytical mindset with attention to detail
- Problem-solving and proactive delivery
- Azure/Entra ID/Microsoft 365 Defender XDR/Sentinel
- PowerShell or Python
- ISO/IEC 27001/27002, NIST CSF 2.0, NIS2
13 ott - Monopoli
Showroom Quaranta Silvino
13 ott - Bolzano
Legami
13 ott - Venezia
Intermedia Selection
13 ott - Cosenza
Acrobatica