ICT Security Engineer

About Us
Generative Bionics is a deep-tech company building humanoid robot platforms to deploy human centered Physical AI. We design intelligent, capable machines that work alongside people in real-world environments — developed in Genova, Italy.

Role
The ICT Security Engineer is a technical and operational cybersecurity professional responsible for designing, implementing, administering, monitoring, and continuously improving security controls across the organization's IT and cloud environments.

Working closely with IT, Technology, Engineering, Development teams, the role contributes to the protection of business-critical systems, data, and services supporting advanced robotics, AI, manufacturing, and industrial operations. The ICT Security Engineer plays a key role in incident response activities, vulnerability management, infrastructure hardening, proactive threat detection, deployment and operation of security technologies. The role also supports compliance, audit, and risk management initiatives by collaborating with Information security GRC specialist and implementing and maintaining security controls aligned with ISO 27001, NIST Cybersecurity Framework, CIS Controls, NIS2, and Cyber Resilience Act requirements.

Responsibilities

Design, implement, administer, and maintain cybersecurity controls across corporate IT infrastructure, cloud platforms, and digital workplace environments;

Support in threat detection, incident analysis, containment, eradication, recovery, and lessons learned activities;

Automate security operations and routine security tasks through scripting and workflow automation where appropriate;

Support the deployment, the hardening and administration of cybersecurity tools and IT platforms;

Support IT department to secure Microsoft components, including endpoint, identity, cloud, email, and collaboration security services;

Support maintaining and improving vulnerability management processes and reporting;

Identity and Access Management, authentication controls, privileged access governance and access reviews;

Develop and maintain security monitoring dashboards, metrics, log analytics and operational reporting;

Contribute technical expertise during security projects, technology deployments, and infrastructure modernization initiatives, audits and remediation plans;

Support compliance activities by maintaining security controls aligned with ISO 27001, NIST Cybersecurity Framework, CIS Controls, NIS2, and Cyber Resilience Act requirements;

Stay informed on emerging threats, vulnerabilities, attack techniques, and security technologies relevant to technology-driven and industrial environments;

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related technical discipline;

Minimum 3 years of experience in cybersecurity engineering, security operations, infrastructure security, SOC, or related cybersecurity technical roles;

Strong understanding of network security concepts, protocols, architectures, and security controls;

Hands-on experience implementing and managing cybersecurity technologies in enterprise environments;

Strong troubleshooting and analytical skills for resolving technical security issues;

Knowledge of incident response processes and security investigation techniques;

Knowledge of endpoint protection, endpoint detection and response (EDR), and endpoint hardening practices;

Knowledge of Microsoft security technologies (including Microsoft Defender XDR, Microsoft Entra ID, Microsoft Intune, and Microsoft Sentinel, conditional access policies and privileged access controls);

Experience with vulnerability management processes, vulnerability assessment tools, remediation coordination, and risk reduction activities;

Practical knowledge of Linux administration and Linux security hardening techniques;

Understanding of cloud security principles and experience securing cloud-based services and workloads;

Familiarity with infrastructure hardening methodologies and industry best practices (CIS Controls, NIST Cybersecurity Framework, ISO 27001);

Ability to communicate effectively with technical and non-technical stakeholders;

Ability to work independently while collaborating effectively across cross-functional teams;

Professional proficiency in English;

High standards of integrity, accountability, confidentiality, and professional judgment;

Availability to travel nationally and internationally is expected;

Experience in robotics, industrial, manufacturing, IoT, OT, or AI-driven environments;

Experience supporting hybrid-cloud and multi-site international infrastructures;

Familiarity with security automation, orchestration, and scripting technologies;

Experience with attack surface management and con