Security by Design Engineer

We are the leading tech company in Europe, supporting digital innovation for over 45 years. We are committed to bringing digital technology into every business. How? By putting customers first and becoming the go-to partner for professionals, small, medium and large companies, offering customised solutions and services to optimise business processes from HR and customer relations to e‑invoicing and digital payments. The Research and Development team is the beating heart of the Group's innovation. We are constantly committed to researching and developing new technologies and solutions to anticipate market needs and exceed our customers' expectations. We invest significantly in artificial intelligence (AI), exploring its potential to develop innovative solutions and improve our products and services.

Join an agile team where you can enhance your technical skills by participating in challenging and scalable projects in the field of software development. In a fast‑paced development environment focused on growth and innovation, you will be responsible for translating requirements into code to create, improve, and maintain high-quality software.

Responsibilities

Drive the continuous improvement of the organization’s application security maturity, defining a structured and scalable approach to secure software development across teams and products.

Define, measure, and track key security KPIs related to vulnerability management processes (e.g. detection, remediation, exposure time), providing visibility on risk and progress over time.

Lead application security initiatives across the organization, implementing security‑by‑design principles from the early stages of development;

Contribute to the definition and evolution of security controls and practices, maintaining alignment with internal standards, regulatory requirements, and industry frameworks.

Collaborate with Product Owners and development teams to align security objectives with business priorities and to promote a shared security culture throughout the software development lifecycle.

Qualifications

Good knowledge of application security frameworks such as SAMM, ASVS, NIST CSF, and similar;

Excellent understanding of certification standards like ISO 27000, as well as NIS2, DORA, ACN guidelines, PCI‑DSS, and their impact on application security;

Knowledge of AI‑focused risk and security frameworks, including NIST AI RMF, EU AI Act requirements, ISO/IEC 23894, OWASP Top 10 for LLMs, and Google SAIF will be considered a plus;

Understanding of AI‑related risks, key facts, and ecosystem dynamics, paired with strong curiosity and continuous awareness of the current and emerging AI technological landscape;

Advanced proficiency in English (C1 level).

Values

ENTREPRENEURSHIP – proactive, responsible, customer‑centric, questioning the status quo and achieving extraordinary results;

INNOVATION – fostering an environment where mistakes are learning opportunities and new solutions are developed;

INCLUSION – creating an inclusive work environment that values each individual’s unique characteristics.

Benefits

WELLBEING – short working week, Friday afternoons off, wellbeing plan with tailored services;

FLEXIBILITY – flexible hybrid work, no clock‑in/out, tools for remote productivity;

DEVELOPMENT AND GROWTH – personalised development programme to build skills and contribute to company goals;

DIVERSITY AND INCLUSIVITY – inclusive environment based on collaboration and respect, leadership focused on trust and talent growth;

IMPACT – focus on sustainability and innovation, creating shared value for customers, partners, and community.

Location The position is open in the Milan or Rome offices.

#J-18808-Ljbffr