Application Security Engineer

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8g0fqm

HSPI S.p.A., part of TXT Group, is looking for a Application Security Engineer to join its team at the Rome office (Cinecittà area).

Key Responsibilities

• Vulnerability Assessment & Penetration Testing: support the execution of Vulnerability Assessment and Penetration Testing activities on applications, infrastructures and Cloud environments, including vulnerability analysis and review of technical findings.
• Vulnerability Analysis & Remediation: identify and classify vulnerabilities, support the definition of remediation actions and verify the effectiveness of implemented fixes through retesting activities.
• Reporting: contribute to the preparation of technical reports and documentation related to security assessments and identified vulnerabilities.
• Security Engineering: based on skills, aptitude and experience gained over time, progressively contribute to activities related to the design, configuration, analysis and validation of security solutions and controls.

Required Technical Skills





• Knowledge of the main application and infrastructure vulnerabilities and related mitigation techniques.
• Basic knowledge of security frameworks and methodologies, such as OWASP, CWE and CVSS.
• Familiarity with common Vulnerability Assessment and Penetration Testing tools, such as Burp Suite, OWASP ZAP, Nessus and Nmap.
• Basic knowledge of scripting/programming, such as Python, Bash or web programming languages.
• Interest in and willingness to develop skills in Cyber Security, particularly in Vulnerability Assessment, Penetration Testing and Security Engineering.

Preferred Qualifications

• Previous experience, including academic or internship experience, with cloud architectures (Azure/AWS) and Docker/Kubernetes environments.
• Active participation in cybersecurity training platforms such as Hack The Box, PortSwigger Web Security Academy, or TryHackMe, or involvement in Capture The Flag (CTF) competitions.
• Entry-level cybersecurity certifications (e.g., eJPT, OSC

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8g0fqm