Application Security Engineer
Pubblicato il 17-10-2026 - TXT GROUP in Roma
HSPI S.p.A., part of TXT Group, is looking for a Application Security Engineer to join its team at the Rome office (Cinecittà area).
Key Responsibilities
- Vulnerability Assessment & Penetration Testing: support the execution of Vulnerability Assessment and Penetration Testing activities on applications, infrastructures and Cloud environments, including vulnerability analysis and review of technical findings.
- Vulnerability Analysis & Remediation: identify and classify vulnerabilities, support the definition of remediation actions and verify the effectiveness of implemented fixes through retesting activities.
- Reporting: contribute to the preparation of technical reports and documentation related to security assessments and identified vulnerabilities.
- Security Engineering: based on skills, aptitude and experience gained over time, progressively contribute to activities related to the design, configuration, analysis and validation of security solutions and controls.
Required Technical Skills
- Knowledge of the main application and infrastructure vulnerabilities and related mitigation techniques.
- Basic knowledge of security frameworks and methodologies, such as OWASP, CWE and CVSS.
- Familiarity with common Vulnerability Assessment and Penetration Testing tools, such as Burp Suite, OWASP ZAP, Nessus and Nmap.
- Basic knowledge of scripting/programming, such as Python, Bash or web programming languages.
- Interest in and willingness to develop skills in Cyber Security, particularly in Vulnerability Assessment, Penetration Testing and Security Engineering.
Preferred Qualifications
- Previous experience, including academic or internship experience, with cloud architectures (Azure/AWS) and Docker/Kubernetes environments.
- Active participation in cybersecurity training platforms such as Hack The Box, PortSwigger Web Security Academy, or TryHackMe, or involvement in Capture The Flag (CTF) competitions.
- Entry-level cybersecurity certifications (e.g., eJPT, OSCP, GPEN) and/or foundational Cloud or Kubernetes certifications.
Why Join HSPI?
- Tailored training and development plans, including internationally recognized certifications and continuous learning on industry best practices.
- Opportunity to work alongside leading clients on strategic cybersecurity projects.
- Early autonomy and responsibility from the very beginning.
- Direct interaction with company management and end clients.
- Hybrid working model.
The position is offered under an Apprenticeship Contract governed by the ItCCNL Commercio, with a RAL ranging from €25.000 to €29.000.
This position is open to candidates of all genders, in accordance with Italian Legislative Decree No. 198/2006. The company promotes equal opportunities and values diversity in all its forms.