Offensive It Security Expert Bardi

Offensive It Security Expert
Bardi
Emilia Romagna, Bardi

Social network you want to login/join with: Offensive IT Security Expert, Metropolitan City of Milan Client: ING Location: Metropolitan City of Milan, Italy Job Category: Other EU work permit required: Yes Job Reference: e58046fe3de0 Job Views: 9 Posted: 02. 03. 2025 Expiry Date: 16. 04. 2025 Job Description: Keeping the company safe, secure and compliant is a top priority at ING. As part of the team, you will collaborate with different internal stakeholders to conduct security assessments, support secure design and development practices, providing security subject matter expertise and education and instilling the core security mindset and culture. You will employ a combination of static and dynamic analysis methodologies to identify and remedy complex vulnerabilities across our products and services, as well as collaborating and communicating with security expert peers across to help implementing best practices across the engineering organization. Key Responsibilities You will examine chosen targets looking for vulnerabilities and weaknesses, assess applications for design related security risks and assist teams in determining appropriate remediation for identified issues; Provide secure code review by assessing reports generated using automated tools (e. g. , Fortify, Checkmarks, etc. ); Provide security advice for tooling (mainly in the area of CI/CD); Participate in audit reviews – provide advice/challenge when/if required; Define & maintain the relevant Software Security processes; Document and improve local software security processes; Bridge the gap between global best practices from inside and outside of the organization with the internal way of working; Knowledge on the following but not limited to: Static Application Security Testing – e. g. , Fortify, Checkmarks, etc. ; Dynamic Application Security Testing – e. g. , Burp Suite, Acunetix, Webinspect, etc. ; What you'll bring to the team: Knowledge and experience: Experience with OWASP, static/dynamic analysis, and common security tools; Experience working within a Software Development Life Cycle; Familiarity with common security libraries, security controls, and common security flaws; Experience performing software security reviews and implementing security solutions; Familiarity with cloud security controls and best practices; Understanding of security engineering, system security, authentication and security protocols, cryptography, or application security; Prior experience with DAST and SAST software tools; Software development or scripting skills represent an advantage. Requirements: Excellent written and verbal communication skills – ability to explain technical solutions to both technical and non-technical audiences; Strong sense of ownership, urgency, and drive; Customer-focused and enjoy working as part of a team; Strong problem solving and analytical thinking - ability to diagnose and resolve ambiguous problems; Willingness to continuously improve skills; Willingness to support and coach less experienced members of your team; provide help when needed and criticize in a constructive manner; Passion for technology; Excellence in execution; Result oriented; Team player; Able to work under pressure. Duration: Permanent About ING: The benefits of joining ING: Super flexible smart working; Competitive base salaries and performance-based bonuses; Diverse cultures & Innovative mindsets; International Environment; Commitment to sustainability; Lots of training development opportunities to help you grow; Lots of moments dedicated to physical and mental well-being; A special day off when it is your birthday: we call it doyourbirthday And of course we can't forget: free water & coffee at the office Our Commitment: Diversity is a fundamental element of our corporate culture, and we are fully committed to creating a safe and inclusive environment, based on mutual respect and the value of diversity, offering equal job opportunities to all qualified candidates. J-18808-Ljbffr