Information & Cyber Security Specialist

Company Description

CAREL is an innovative global high-tech company, leader in the evolution of control technology and humidification for air conditioning and refrigeration, listed at the Italian stock exchange.

To foster our continuous growth, we're strengthening our organization looking at smart professionals willing to join the team as contributors to company mission and goals

Position

We are looking for an Information & Cyber Security Specialist to join our ICS Team and support us in ensuring a consistent, appropriate, and pervasive security posture on Group perimeter, with focus on the following areas:

· Collaboration with our SOC in monitoring, managing and analyzing cyber security threats and incidents, evaluating the results of investigations;

· Analysis of events detected through SIEM/EDR and other cyber threat intelligence tools;

· Preparation of security incident reports and recommendations regarding security updates;

· Support in managing security assessments and internal Red Teaming threat simulation, identifying and planning remediation activities;

· Periodic collection of metrics to verify the effectiveness of security safeguards and monitoring of cyber posture to evolve best practices

Requirements

-Experience of at least 2-3 years in a Security Incident Management Team

-Bachelor’s/Master’s degree in Management, Telecommunications, Computer Engineering or related field

-Knowledge of security incident processes and best practices management

-Understanding of major security technologies and networks systems (e.g., routers, switches, Proxy, IDS/IPS, SIEM, WAF, VPN, authentication modes, SOAR, EDR, XDR, etc.)

-Good knowledge of cyber threats such as malware, phishing attacks, knowing how to identify and prevent such threats

-Good communication and team building skills, autonomy, focused on results

-Good English language

Other information

Welcome elements:

· Expertise in Incident Response SOC/CERT and experience on "Blue Teaming" techniques

· Knowledge of Cyber Security best practices and international standards (e.g., ISO27001, NIST, National Framework) and regulatory aspects, with security requirements (e.g., GDPR, NIS and NIS2).

· Knowledge in Ethical Hacking, “Red Teaming", Forensic, Cyber Threat Hunting, Cyber Threat Intelligence (CTI) are welcome;

· Prince2 or PMBOK certifications, ITIL, Cobit, CISA, CISM.