Information & Cyber Security Specialist

CAREL is an innovative global high-tech company, leader in the evolution of control technology and humidification for air conditioning and refrigeration, listed at the Italian stock exchange.

To foster our continuous growth, we're strengthening our organization looking at smart professionals willing to join the team as contributors to company mission and goals.

**Posizione**:
We are looking for an** Information & Cyber Security Specialist** to join our ICS Team and support us in ensuring a consistent, appropriate, and pervasive security posture on Group perimeter, with focus on the following areas:

- Collaboration with our SOC in monitoring, managing and analyzing cyber security threats and incidents, evaluating the results of investigations;
- Analysis of events detected through SIEM/EDR and other cyber threat intelligence tools;
- Preparation of security incident reports and recommendations regarding security updates;
- Support in managing security assessments and internal Red Teaming threat simulation, identifying and planning remediation activities;
- Periodic collection of metrics to verify the effectiveness of security safeguards and monitoring of cyber posture to evolve best practices.

**Requisiti**:

- Experience of at least 2/3 years in a Security Incident Management Team;
- Bachelor’s/Master’s degree in Management, Telecommunications, Computer Engineering or related field;
- Understanding of major security technologies and networks systems (e.g., routers, switches, Proxy, IDS/IPS, SIEM, WAF, VPN, authentication modes, SOAR, EDR, XDR, etc.);
- Good knowledge of cyber threats such as malware, phishing attacks, knowing how to identify and prevent such threats;
- Knowledge of security incident processes and best practices management;
- Good communication and team building skills, autonomy, focused on results;
- Good English language.

**Altre informazioni**:

- Expertise in Ethical Hacking, Incident Response and Forensic, SOC/CERT - Cyber Threat Hunting, Cyber Threat Intelligence (CTI);
- Experience on "Blue Teaming" and “Red Teaming" techniques;
- Prince2 or PMBOK certifications, ITIL, Cobit, CISA, CISM;
- Knowledge of Cyber Security best practices and international standards (e.g., ISO27001, NIST, National Framework) and regulatory aspects, with security requirements (e.g., GDPR, NIS and NIS2).