Security Engineer
Pubblicato il 15-10-2026 - Jobgether in Bergamo
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer (Fractional) based in Italy. This is a tempo parziale security engineering opportunity focused on elevating an established technology organization toward an enterprise-grade security posture. You will shape the security strategy, establish practical controls, and prioritize initiatives according to business risk and impact. The role combines hands-on cloud and application security with compliance, incident readiness, policy development, and security governance. You will work closely with IT leadership and engineering teams, providing mentorship and helping developers adopt safe coding and DevSecOps practices. You will also support cross-border privacy and security requirements across European, Asian, and Australian operations. Beyond the core organization, you will advise early-stage ventures on right-sized security frameworks and help assess security risks during investment processes.
This role is ideal for an experienced security professional who can operate independently, translate technical risks into practical actions, and balance strong security standards with business agility. Accountabilities * Develop and maintain a 12-month security roadmap that balances enterprise-grade security expectations with the speed and flexibility of a technology-focused organization. * Establish and maintain a security risk register, assessing risks based on business impact and prioritizing remediation efforts accordingly. * Mentor the IT Manager and help translate day-to-day technical activities into measurable security controls and improvements. * Establish security office hours and provide practical guidance to engineering teams on secure coding, OWASP principles, DevSecOps, and security best practices. * Assess and strengthen security controls across cloud infrastructure, development environments, repositories, CI/CD pipelines, identit