Sr Security Engineer

Qualcomm

Turin, Italy

We are now looking for a Sr Cloud Security Engineer to join our team of expert professionals eager to share their knowledge and be part of this vibrant company’s journey towards the democratization of technology. You will be responsible for ensuring the security of Arduino Software and Cloud platforms and also for fostering awareness inside the company about security best practices.

What you'll work on

Make sure that the data we are trusted to protect is secured to the highest standards;
Help the Development and DevOps teams on Security Best Practices;
Provide security guidance on a constant stream of new projects and technologies;
Provide subject matter expertise on architecture, authentication and system security;
Design, implement, and manage security solutions for AWS environment through IaC technologies;
Implement and manage standard AWS security tools, including but not limited to AWS Security Hub, AWS GuardDuty, Inspector, CloudTrail, WAF, KMS, Config, IAM Access Analyzer;
Building secure CI/CD pipelines adopting DevSecOps principles and AI Security Agent technologies;
Build internal tools for detecting and responding to security problems and incidents;
Monitor cloud environments for security incidents and anomalies, and respond to suspected incidents in a timely manner;
Collaborate with Infrastructure and Application development teams to integrate security controls in the cloud using standardized configuration tools;
Work with product development teams to implement security controls that comply with recognized regulatory, compliance, and standards such as RED, EN18031, and CRA;
Make informed prioritization decisions by assessing risk across vulnerability management activities, including CVE triage, CVSS scoring, coordinated disclosure, and collaboration with external reporters;
Ensure alignment and compliance with ISO 27001 and provide definition of Security policy for all the organization, including Training of company employees on security policy.

Minimum Qualifications

Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 6+ years of Software Engineering or related work experience; OR
Master's degree in Engineering, Information Systems, Computer Science, or related field and 5+ years of Software Engineering or related work experience; OR
PhD in Engineering, Information Systems, Computer Science, or related field and 4+ years of Software Engineering or related work experience;
3+ years of work experience with Programming Language such as C, C++, Java, Python, etc.

What you bring

Bachelor or Master Degree in Computer Science or related field, or equivalent experience;
5+ years of experience in security engineering or comparable experience (DevOps, SRE);
Experience in Containerisation/Orchestration with Docker and Kubernetes;
Strong, well-rounded background in host, network, and cloud security;
Experience in designing and defining secure cloud native systems;
Experience with applied cryptography including PKI, TLS, and key management;
Expertise with modern programming languages and software versioning tools (GIT/GitHub);
Knowledge of relevant security compliance, standards and regulations (e.g. ISO, SOC, NIST, GDPR, CIS, CRA);
Knowledge of internet security issues and the threat landscape (e.g. OWASP, STRIDE, MITRE ATT&CK, CWE);
Experience with security monitoring, incident detection and response to suspected incidents in a timely manner;
Good experience with Vulnerability Management, Threat modeling, Risk Assessment and Risk Mitigation in cloud, web or IoT ecosystem;
Good written and oral communication skills in English;
Ability to work with cross-functional teams (including developers, engineers, and IT) and to explain technical concepts to non-technical audiences (eg training for employees);
Skilled in problem-solving;
Analytical skills; result-oriented and continuous learning approach.