Cyber Security Specialist

OTB Spa is looking for a Cyber Security Specialist to join the ICT Infrastructure & Operations department with the purpose of safeguarding the organization’s digital assets and ensuring the confidentiality, integrity, and availability of sensitive information.

Key Responsibilities

• Act as a main contact point for our SOC, monitoring the service KPI and contribute to the service improvements.
• Actively monitor network traffic, system logs, and security alerts to identify potential threats or anomalies.
• Collaborate with the SOC and OTB IT Team to investigate incidents, assess risks, and develop strategies for threat mitigation.
• Collaborate to design, implement, maintain and evolve all the security tools such as SIEM, EDR/XDR, Vulnerability scanner, IDS/IPS, Proxy etc.
• Collaborate on the management, configuration, patching, monitoring, and fine tuning of the Vulnerability & Application Scanning products.
• Support other teams on vulnerability resolution.
• Participate in vulnerability assessments and penetration testing to proactively uncover weaknesses in the organization’s infrastructure.
• Contribute to the development and enforcement of security policies, standards, and procedures.
• Establish Security Awareness Program to educate employees about security best practices, social engineering risks, and password hygiene.

Requirements

• Minimum 3 years’ experience in Cyber Security area.
• Good knowledge of SIEM tools such as Splunk, Microsoft Sentinel etc.
• Hands‑on experience and knowledge on the following technologies:
  • Firewall, WAF, VPN, IDS/IPS, EDR, EPP, DLP, SWG, CASB, NAC, IAM
  • Penetration testing, vulnerability scanning, SIEM, SOAR, patch management solution, data leakage solution, DDOS prevention, DNS Security, Cloud Security
• Familiarity with the NIST Cybersecurity Framework and a threat intelligence framework such as MITRE ATT&CK.
• Experience with supporting an environment that includes Microsoft Windows, UNIX, Macintosh OSX, Linux, and mobile operating systems.
• Ability to effectively collaborate within the team and across departments.
• Ability to organize autonomously and efficiently multiple tasks.
• Self‑motivated to learn and grow.
• Preference will be given to candidates with professional security management certification, such as CompTIA Cybersecurity Analyst (CySA+), GIAC Security Essentials Certification (GSEC), Certified Ethical hacker or other similar credentials.

Job location: Milan.