Penetration tester

p_ bAbout us /b _ /p pbSky is the tech media company /b that makes entertainment and connectivity a personal, simple, and seamless experience. /p pOur motto is bWe Believe in Better: /b we believe people deserve the best, and every day we innovate to create value and make our customers’ lives easier. /p pWe are part of bSky Group /b and the bComcast /b family b, /b operating within an international environment focused on continuous innovation and powered by world-class technology that enables us to reach millions of people every day. /p pWith an bIP-first approach, /b we design cutting-edge technology platforms such as bSky Stream, Sky Q, Sky Glass, and NOW, /b bringing together premium content, trusted and always-on news coverage, and major sporting events within a simple and intuitive ecosystem. /p pWe connect with audiences across the entire country through bour free-to-air channels – TV8, Cielo, and Sky TG24 – /b and go beyond entertainment with bSky Wifi and Sky Mobile /b, delivering ultra-fast connectivity both at home and on the go. /p pThis is how we bring the bjoy of a better experience /b, guided by our values b: /b /p ul libCreative /b. We are ambitious and innovative, embracing new technologies and leveraging insights to stay ahead of the curve, continuously raising the bar for our customers. /li libWelcoming /b. We are inclusive, collaborative, and respectful, fostering a strong sense of belonging. /li libSimplifying /b. We focus on what truly matters, set clear priorities, bring clarity, and remove complexity. /li libDo the Right Thing. /b We build a culture founded on clarity, fairness, and trust through transparent processes and decisions that people can rely on. /li /ul h3_ bJob: /b Penetration Tester_ /h3 h3_ bRole description: /b _ /h3 pAs a Penetration Tester, you will be responsible for identifying, assessing, and validating security vulnerabilities in Sky Italy applications, systems, networks, and cloud environments. You will also play an active role in supporting the remediation process, working alongside relevant teams to ensure vulnerabilities are properly understood, prioritised, and fixed. This role requires solid technical expertise, strong analytical thinking, and the ability to collaborate effectively with both technical and non-technical stakeholders within region and at Group level, translating complex security findings into clear, actionable insights for audiences at different levels of the organisation. /p h3_ bWhat you’ll do: /b _ /h3 ul liPlan, prepare and execute penetration testing activities on Sky Italy applications, systems, networks, and cloud environments. /li liIdentify, verify, and validate vulnerabilities using both manual techniques and automated tools. /li liSimulate real-world attack scenarios to assess the effectiveness of existing security controls. /li liDocument findings clearly, including technical details, potential impact, and risk severity. /li liProduce detailed reports and present results to both technical and non-technical stakeholders. /li liSupport the remediation process to ensure vulnerabilities are properly understood, prioritised, and fixed. /li liProactively stay up to date with emerging threats, vulnerabilities, and attack techniques. /li liContribute to the continuous improvement of internal security testing methodologies and best practices. /li liSupport security incident management. /li liSupport application security management. /li liWork closely with Group in defining offensive strategy to be implemented locally in the region. /li /ul h3_ bWhat we’re looking for: /b _ /h3 ul liMaster’s degree in Computer Science or Computer Engineering, or equivalent experience. /li liProven experience as a Penetration Tester and/or Red Teamer in complex environments. /li liSolid understanding of common vulnerabilities and attack techniques. /li liHands‑on experience with standard penetration testing tools (e.g. Nmap, Burp Suite, Metasploit, Kali Linux). /li liExperience with Active Directory configuration review. /li liFamiliarity with scripting and programming languages (e.g. Bash, Python, JavaScript). /li liSolid knowledge of networking, operating systems, web/cloud architectures, and security fundamentals. /li liStrong analytical and problem‑solving skills, with a methodical approach to identifying and validating vulnerabilities. /li liEnglish: B2 level or above, both written and spoken. /li liProactivity and a strong problem‑solving mindset. /li liExcellent communication skills for interacting with both technical and non-technical stakeholders. /li /ul h3_ bPreferred

Qualifications:
/b _ /h3 ul liCyber security certifications (e.g. OSCP, OSWE, or equivalent). /li liFamiliarity with DevSecOps practices and integrating security into CI/CD pipelines. /li liContributions to the security community (e.g. CTF participation, blog posts, open‑source tools, conference talks). /li /ul h3_ bWhat

we offer
/b _ /h3 pUnder the Private Radio and Television Indus