Application Security Engineer

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8g7kem

HSPI S.p.A., part of TXT Group, is looking for a Application Security Engineer to join its team at the Rome office (Cinecittà area).
Key Responsibilities
Vulnerability Assessment & Penetration Testing: support the execution of Vulnerability Assessment and Penetration Testing activities on applications, infrastructures and Cloud environments, including vulnerability analysis and review of technical findings.
Vulnerability Analysis & Remediation: identify and classify vulnerabilities, support the definition of remediation actions and verify the effectiveness of implemented fixes through retesting activities.
Reporting: contribute to the preparation of technical reports and documentation related to security assessments and identified vulnerabilities.
Security Engineering: based on skills, aptitude and experience gained over time, progressively contribute to activities related to the design, configuration, analysis and validation of security solutions and controls.
Required Technical Skills

Knowledge of the main application and infrastructure vulnerabilities and related mitigation techniques.
Basic knowledge of security frameworks and methodologies, such as OWASP, CWE and CVSS.
Familiarity with common Vulnerability Assessment and Penetration Testing tools, such as Burp Suite, OWASP ZAP, Nessus and Nmap.
Basic knowledge of scripting/programming, such as Python, Bash or web programming languages.




Interest in and willingness to develop skills in Cyber Security, particularly in Vulnerability Assessment, Penetration Testing and Security Engineering.

Preferred Qualifications

Previous experience, including academic or internship experience, with cloud architectures (Azure/AWS) and Docker/Kubernetes environments.

Active participation in cybersecurity training platforms such as Hack The Box, PortSwigger Web Security Academy, or TryHackMe, or involvement in Capture The Flag (CTF) competitions.

Entry-level cybersecurity certifications (e.g., eJPT, OSCP, GPEN) and/or foundational Cloud or Kubernetes certifications.
Why Join HSPI?

Tailored training and development plans, including internationally recognized certifications and continuous learning on industry best practices.

Opportunity to work alongside leading clients on strategic cybersecurity projects.

Early autonomy and responsibility from the very beginning.

Direct interaction with company management and end clients.

Hybrid working model.

The position is offered under an Apprenticeship Contract governed by the ItCCNL Commercio, with a RAL ranging from €25.000 to €29.000.

This position is open to candidates of all genders, in accordance with Italian Legislative Decree No. 198/2006. The company promotes equal opportunities and values diversity in all its forms.

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8g7kem