Cyber Security Consultant
Pubblicato il 29-10-2026 - Pentasia in Bologna
We are looking for an experienced Cybersecurity Consultant II to join an international cybersecurity team specialising in penetration testing, security assessments, and risk management.
This role offers the opportunity to work on complex security projects, identify vulnerabilities across diverse technology environments, and help organisations strengthen their security posture.
The position can be based in Bologna, Villanova di Camposampiero, or Gorizia, with remote work also considered for candidates located near a major airport.
About the Role:
You will independently conduct advanced penetration tests and security assessments across networks, operating systems, cloud infrastructures, web and mobile applications, and APIs. You will identify vulnerabilities, simulate real-world attack scenarios, and provide practical recommendations to improve clients' security.
You will also manage projects from planning through delivery, present findings to stakeholders, review technical reports, and provide guidance to junior consultants.
Key Responsibilities:
- - Plan and execute complex penetration tests and security assessments across different technologies and environments.
- - Manage engagements independently, coordinating with clients, project managers, and technical teams.
- - Troubleshoot technical issues, identify root causes, and resolve project blockers.
- - Document vulnerabilities, assess risks, and deliver detailed technical reports.
- - Present findings and recommend remediation strategies and appropriate security controls.
- - Ensure assessments comply with relevant regulatory requirements and quality standards.
- - Mentor junior consultants and support their technical development.
- - Stay up to date with emerging threats, vulnerabilities, and security testing methodologies.
- - Contribute to improvements in internal tools, processes, and technical practices.
Requirements:
- - At least 3 years of relevant cybersecurity or penetration testing experience.
- - An industry-recognised penetration testing certification, such as OSCP, eCPPT, or GIAC GPEN.
- - Strong knowledge of Linux, Windows, networking, web application security, and cloud security.
- - Hands-on experience independently conducting network, web application, and API penetration tests.
- - Ability to manage projects autonomously from start to finish.
- - Strong analytical, troubleshooting, and organisational skills.
- - Excellent written and verbal communication skills.
- - High attention to detail and a client-focused approach.
- - A degree in Computer Science, Information Systems, or a related field is preferred; equivalent professional experience will also be considered.
Nice to Have:
- - Advanced offensive security certifications, such as OSEP, OSWE, OSED, eWPTX, or CRTO.
- - AWS or Azure security certifications or practical cloud security experience.
- - Experience in gaming, lottery, or other regulated industries.
- - Familiarity with regulatory testing and compliance reporting.
- - Scripting skills in Python, PowerShell, or Bash.
- - Knowledge of ISO/IEC 27001:2022 and NIST CSF.
- - Experience mentoring colleagues or contributing to security research.
- - Exposure to physical security testing, phishing, or social engineering.
#J-18808-Ljbffr