Cyber Security Analyst (VA/PT)

We are seeking a skilled Cyber Security Analyst (VA/PT) to join our team, with a focus on Vulnerability Assessment and Penetration test.

The experience we offer to you

• you will have the chance to address Cyber Security aspects in the most challenging environment for a Security expert: a very large multinational financial and banking institution; an ever-evolving business scenario; central priority of the cyber risk among the top risks for the bank; resources and grip on the field; peculiar Cyber Crime and Cyber Threats scenarios
• you will be part of a collaborative , determined team in constant growth, aiming at increasing and enhancing the Security Posture and contributing to the reputation of the Group
• you will work in a new technology sector with team spirit and learning attitude
• you will have the chance to develop your technical competencies and to foster your exposure and your cyber security background
• you will have the opportunity to make international job rotation within the Security professional family and to access to our development programs, continuous high-level Security training and certification paths

Key tasks and responsibilities

Within this environment you will be responsible for:

• manage and co-ordinate Penetration test activities to pro-actively identify security weaknesses and gaps in UniCredit’s security posture and recommend necessary controls and procedures to protect UniCredit adversarial threats
• configure vulnerability assessment tools to perform vulnerability scanning on an enterprise network and web applications through host based and network scans
• act as technical expert for processes needed to run a successful vulnerability management function
• manage the vulnerability lifecycle across web applications, API’s, infrastructure, cloud, and mobile applications from detection to closure
• operate not limited to technical approach but the associated processes for end-to-end management of the vulnerability lifecycle
• act as subject matter expertise in web, mobile and network vulnerability management with track record of end-to-end testing of complex systems
• support and execute internal Red Teaming exercise to simulate potential adversarial threats & attacks

Qualification and competencies

• genuine passion in cyber security, proactivity, team working and curiosity
• Bachelor’s degree or higher in STEM: information Security, Information Technology, Engineering, Math, Physics, Statistics, Computer Science or related field
• experience/ knowledge in Vulnerability Management activities (Vulnerability Assessment, Penetration test)
• fluent English (written and spoken)
• expertise in analyzing and validate vulnerabilities arose from web application, mobile app, API and infrastructure
• experience in using main market solution for vulnerability scanning at infrastructure and application level
• awareness of the European and international legislation landscape in information security area
• understanding of OWASP Top 10 Cyber Risks and SANS Top 25 web application and network vulnerabilities
• thorough understanding of the latest cyber security principles, techniques, and protocols
• knowledge of Cloud computing and relevant cloud security technologies
• prior experience with Red Teaming Operation
• risk oriented mindset
• ability to prioritize tasks by a risk-based approach and problem-solving attitude
• has the ability to deliver on multiple projects simultaneously
• analytical skills and inclination to act on the basis of quantitative evidence
• attitude for collaboration and team work
• experience in the Banking and Financial industry is a plus
• nice to have security industry certification like  GIAC/SANS, ISACA, ISC2, Offensive Security, EC-Council, eLearnSecurity

We are looking for candidates with different levels of seniority. Salary starts from 34 k and can grow based on candidates experience and skills.

Boost your professional career in Cyber Security. Join us and you will be part of our Cyber Security team!

Send your cv to alessio[dot]petracca[at]unicredit[dot]eu

Cyber Security Engineer

We are seeking a skilled Cyber Security Engineer to join our team, with a focus on delivering cybersecurity solutions.

The experience we offer to you

• you will have the chance to address Cyber Security aspects in the most challenging environment for a Security expert: a very large multinational financial and banking institution; an ever-evolving business scenario; central priority of the cyber risk among the top risks for the bank; resources and grip on the field; peculiar Cyber Crime and Cyber Threats scenarios
• you will be part of a collaborative, determined team in constant growth, aiming at increasing and enhancing the Security Posture and contributing to the reputation of the Group
• you will work in a new technology sector with team spirit and learning attitude
• you will have the chance to develop your technical competencies and to foster your exposure and your cyber security background
• you will have the opportunity to make international job rotation within the Security professional family and to access to our development programs, continuous high-level Security training and certification paths

Key tasks and responsibilities

Within this environment you will be responsible for:

• scout cybersecurity solutions to meet project requirements
• collaborate with cross-functional teams to understand project requirements
• set up the solutions and act as the Technical Leader
• ensure solutions delivery is on-time, on-budget, and meets requirements
• hand over projects to the operation teams, providing training, documentation, and knowledge transfer
• develop and maintain cybersecurity policies, procedures, and guidelines related to project delivery
• stay current with emerging cybersecurity threats, trends, and technologies

Qualification and competencies

• genuine passion in cyber security, proactivity, team working and curiosity
• Bachelor’s degree or higher in STEM: information Security, Information Technology, Engineering, Math, Physics, Statistics, Computer Science or related field
• experience/ knowledge in cybersecurity, with a focus on delivering cybersecurity projects
• fluent English (written and spoken)
• strong technical skills in network security, firewalls, intrusion detection and prevention systems, antivirus and malware protection, EDR, XDR, NDR, DLP and security information and event management (SIEM) systems
• knowledge of security best practices with reference to main public clouds (AWS/AZURE/GCP)
• strong knowledge of cryptographic alghoritms and encryption tecniques across several security domains
• knowledge of Cloud computing and relevant cloud security technologies
• awareness of the European and international legislation landscape in information security area
• knowledge of standards of information security management (ISO/IEC, NIST) and best practices ( OWASP, CSA, CIS etc.)
• risk oriented mindset
• ability to prioritize tasks by a risk-based approach and problem-solving attitude
• has the ability to deliver on multiple projects simultaneously
• analytical skills and inclination to act on the basis of quantitative evidence
• attitude for collaboration and team work
• experience in the Banking and Financial industry is a plus
• nice to have security industry certification like  GIAC/SANS, ISACA, ISC2, Offensive Security, EC-Council, eLearnSecurity

We are looking for candidates with different levels of seniority. Salary starts from 34k and can grow based on candidates experience and skills.

Boost your professional career in Cyber Security. Join us and you will be part of our Cyber Security team!

Send your cv to fabio[dot]cimafonte[at]unicredit[dot]eu

Cyber Security Analyst (SOC/CERT)

We are seeking a skilled Cyber Security Analyst (SOC/CERT) to join our team, with a focus on Cyber Threat Analysis.

The experience we offer to you

• you will have the chance to address Cyber Security aspects in the most challenging environment for a Security expert: a very large multinational financial and banking institution; an ever-evolving business scenario; central priority of the cyber risk among the top risks for the bank; resources and grip on the field; peculiar Cyber Crime and Cyber Threats scenarios
• you will be part of a collaborative, determined team in constant growth, aiming at increasing and enhancing the Security Posture and contributing to the reputation of the Group
• you will work in a new technology sector with team spirit and learning attitude
• you will have the chance to develop your technical competencies and to foster your exposure and your cyber security background
• you will have the opportunity to make international job rotation within the Security professional family and to access to our development programs, continuous high-level Security training and certification paths

Key tasks and responsibilities

Within this environment you will be responsible for:

• investigate network intrusions and other cyber security breaches or cyber attacks
• identify process improvements and automate it with SOAR platform
• hunt threats out of security telemetry including endpoint, network, and cloud-based sensors
• scout and evaluate new cyber security defensive approaches and products
• contribute to perform Forensic analysis to support security investigations
• analyze threat intelligence and malware analysis information to enable and enhance detections and protections methods
• alert Triage and Incident response – triage security events, using data correlation and enrichment techniques. Use incident management systems to effectively analyze, document, track, and extract critical metrics from your security incidents
• govern security monitoring and incident response as required by the business and regulators, in alignment with Cyber Security’s mission; assess incidents’ root causes and improve the security posture
• produce managerial reporting, with deep dive and analytics over specific topics and issues as needed

Qualification and competencies

• genuine passion in cyber security, proactivity, team working and curiosity
• Bachelor’s degree or higher in STEM: information Security, Information Technology, Engineering, Math, Physics, Statistics, Computer Science or related field
• experience/ knowledge in one or more of the following: Network Security, Enterprise Systems security and administration, Data Security, Identity and Access Management, Cybersecurity and Security Operations (SOC, CERT, Cyber Threat Intelligence, Vulnerability Management, Penetration Testing, …)
• fluent English (written and spoken)
• knowledge of scripting languages such as Shell, Perl, Python, etc.
• awareness of the European and international legislation landscape in information security area
• knowledge of standards of information security management (ISO/IEC, NIST) and best practices ( OWASP, CSA, etc.)
• knowledge of the Cyber security solutions landscape and ability to evaluate security tools (such as antimalware, anti DDoS, intrusion detection and prevention , monitoring / forensics tool, threats detection and mitigation, big data for security)
• knowledge of Cloud computing and relevant cloud security technologies
• knowledge of cyber threat landscape and threat intelligence analysis
• risk oriented mindset
• ability to prioritize tasks by a risk-based approach and problem-solving attitude
• has the ability to deliver on multiple projects simultaneously
• analytical skills and inclination to act on the basis of quantitative evidence
• attitude for collaboration and team work

• experience in the Banking and Financial industry is a plus

• nice to have security industry certification like  GIAC/SANS, ISACA, ISC2, Offensive Security, EC-Council, eLearnSecurity

We are looking for candidates with different levels of seniority. Salary starts from 34 k and can grow based on candidates experience and skills.

Boost your professional career in Cyber Security. Join us and you will be part of our Cyber Security team!

Send your cv to gabriele[dot]giammusso[at]unicredit[dot]eu