Application Security Engineer

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8hgves

Questa posizione è in TXT Group

Il processo di selezione sarà interamente gestito TXT Group.

--

HSPI S.p.A., part of TXT Group, is looking for a Application Security Engineer to join its team at the Rome office (Cinecittà area). ### Key Responsibilities * **Vulnerability Assessment & Penetration Testing**: support the execution of Vulnerability Assessment and Penetration Testing activities on applications, infrastructures and Cloud environments, including vulnerability analysis and review of technical findings. * **Vulnerability Analysis & Remediation**: identify and classify vulnerabilities, support the definition of remediation actions and verify the effectiveness of implemented fixes through retesting activities. * **Reporting**: contribute to the preparation of technical reports and documentation related to security assessments and identified vulnerabilities. * **Security Engineering**: based on skills, aptitude and experience gained over time, progressively contribute to activities related to the design, configuration, analysis and validation of security solutions and controls. ### Required Technical Skills * Knowledge of the main application and infrastructure vulnerabilities and related mitigation techniques. * Basic knowledge of security frameworks and methodologies, such as OWASP, CWE and CVSS. * Familiarity with common Vulnerability Assessment and Penetration Testing tools, such as Burp Suite, OWASP ZAP, Nessus and Nmap. * Basic knowledge of scripting/programming,



such as Python, Bash or web programming languages. * Interest in and willingness to develop skills in Cyber Security, particularly in Vulnerability Assessment, Penetration Testing and Security Engineering. ### Preferred Qualifications * Previous experience, including academic or internship experience, with cloud architectures (Azure/AWS) and Docker/Kubernetes environments. * Active participation in cybersecurity training platforms such as Hack The Box, PortSwigger Web Security Academy, or TryHackMe, or involvement in Capture The Flag (CTF) competitions. * Entry-level cybersecurity certifications (e.g., eJPT, OSCP, GPEN) and/or foundational Cloud or Kubernetes certifications. ### Why Join HSPI? * Tailored training and development plans, including internationally recognized certifications and continuous learning on industry best practices. * Opportunity to work alongside leading clients on strategic cybersecurity projects. * Early autonomy and responsibility from the very beginning. * Direct interaction with company management and end clients. * Hybrid working model. The position is offered under an Apprenticeship Contract governed by the ItCCNL Commercio, with a RAL ranging from €25.000 to €29.000. This position is open to candidates of all genders, in accordance with Italian Legislative Decree No. 198/2006. The company promotes equal opportunities and values diversity in all its forms.

--

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8hgves