Senior Cybersecurity Engineer

About the role

We are seeking a Senior Cybersecurity Engineer to lead the design, implementation, and continuous improvement of enterprise security across cloud infrastructure, SaaS platforms, and modern development environments. Based in Italy and working fully remote, you will collaborate with engineering, compliance, and operations teams to protect critical assets and ensure regulatory compliance.

Key responsibilities

• Implement and maintain enterprise cybersecurity programs across cloud and corporate environments.
• Manage compliance initiatives aligned with NYDFS, ISO 27001, SOC 2, PCI DSS and other standards.
• Conduct vulnerability assessments, coordinate penetration testing, and drive remediation.
• Monitor, investigate, and respond to security events using AWS security services and SIEM platforms.
• Develop incident response procedures, IAM controls, and security governance practices.
• Partner with software engineering teams to embed security into the SDLC through secure coding guidance, threat modeling, and application security reviews.
• Support security audits, vendor risk assessments, client security reviews, and produce technical documentation.

Required profile

• 7+ years of experience in cybersecurity engineering or information security, preferably in SaaS, cloud, or fintech environments.
• Strong expertise in AWS cloud security, IAM, security monitoring, logging, and security operations.
• Hands‑on experience with SIEM platforms, vulnerability management, penetration testing, and incident response.
• Deep understanding of application security, API security, secure SDLC practices, and OWASP Top 10.
• Excellent communication skills and experience supporting audits and cross‑functional initiatives.
• Relevant certifications such as CISSP, CISM, CEH are highly desirable.

Required skills

• AWS
• IAM
• SIEM
• Vulnerability management
• Penetration testing
• Incident response
• Application security
• API security
• Secure SDLC
• OWASP Top 10
• NYDFS Cybersecurity Regulation
• ISO 27001
• SOC 2
• PCI DSS

What we offer

• Competitive compensation package.
• Fully remote work environment.
• Opportunity to tackle complex security challenges and influence secure product development.