Job Closed
This listing is no longer active.
Security Engineer
Location
Italy
Posted
36 days ago
Salary
€61K - €76K / year
Seniority
Senior
Job Description
Security Engineer
Air Apps
• Develop and implement threat modeling to identify security risks across applications and infrastructure. • Conduct vulnerability scanning, penetration testing, and security assessments to detect weaknesses. • Define and enforce secure coding practices in collaboration with development teams. • Work with DevOps to integrate security into CI/CD pipelines and automate security testing. • Monitor and respond to security incidents, conducting root cause analysis and implementing preventative measures. • Ensure compliance with security standards and regulations (e.g., ISO 27001, GDPR, SOC 2). • Design and implement identity and access management (IAM) policies, encryption standards, and authentication mechanisms. • Collaborate with product teams to conduct security reviews of features, APIs, and third-party integrations. • Develop incident response plans, security documentation, and best practices. • Stay ahead of emerging threats, vulnerabilities, and security technologies.
Job Requirements
- Around 4+ years of experience in cybersecurity, application security, or security engineering.
- Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques.
- Experience with vulnerability scanning tools (Nessus, Qualys, Burp Suite) and penetration testing methodologies.
- Hands-on experience with SIEM, intrusion detection systems (IDS), and security monitoring tools.
- Proficiency in scripting and automation (Python, Bash, PowerShell) for security tasks.
- Familiarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection.
- Knowledge of encryption protocols, network security, and API security best practices.
- Experience working with DevSecOps, integrating security into CI/CD pipelines.
- Ability to analyze security logs, detect anomalies, and mitigate potential threats.
- Excellent problem-solving skills and ability to communicate security concepts to non-technical stakeholders.
Benefits
- Apple hardware ecosystem for work.
- Annual Bonus
- Top-tier Health and Life Insurance for peace of mind.
- Transportation Budget to support your commute needs.
- Coverflex benefits package for meal allowances, well-being, and more.
- Childcare support.
- Air Conference - an opportunity to meet the team, collaborate, and grow together.
- Pension Fund to support your long-term financial planning.
- Urban Sports Club membership to keep you active.
- Meals 100% free at the hub.
Related Guides
Related Categories
Related Job Pages
More Security Engineer Jobs
Web3 Security Operation Specialist
BinanceThe World’s Leading Blockchain Ecosystem and Digital Asset Exchange
• Analyze complex Web3 security cases and extract recurring attack patterns to build and maintain comprehensive SOPs. • Proactively identify gaps in current operation workflows and propose systematic improvements to enhance the team's overall efficiency. • Partner with AI agents to crystallize security insights into a high-quality knowledge base, improve team’s collective intelligence and operational speed. • Stay ahead of emerging fraud techniques and evolving Web3 product logic, translating these trends into actionable defense strategies for the team. • Work closely with engineering and strategy teams to transform manual analysis into automated detection rules.
Advisory Solution Consultant - Identity & Security
ServiceNowAs the AI platform for business transformation, we're putting AI to work across organizations — freeing people for work that matters. Making old tech work with new tech. Reaching across departments, from the front office to the back office and every office in between. Our ambition? To become the AI defining enterprise software company of the 21st century (or "AI DESCO21C," as we like to call it). With more than 8,100+ customers, we serve approximately 85% of the Fortune 500®, and we're proud to be a Fortune 100 Best Companies to Work For® and World's Most Admired Companies™. Explore your future career with us, visit www.servicenow.com/careers. From Fortune. ©2025 Fortune Media IP Limited. All rights reserved. Used under license.
Company Description It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today - ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500®. Our intelligent cloud-based platform seamlessly connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work. But this is just the beginning of our journey. Join us as we pursue our purpose to make the world work better for everyone. Job Description Overview: The Solution Consultant - Identity & Security partners with Sales to help customers address complex identity, access, and security challenges. This role reports to the Solution Consulting Manager within the Identity & Security team and serves as a trusted technical and business advisor, translating requirements into differentiated, outcome-driven solutions that reduce risk, improve governance, and enable secure business operations. The ideal candidate combines deep domain knowledge in identity and security with a consultative mindset and can communicate effectively with both technical practitioners and executive stakeholders. This is a fast-paced, growth-stage team that values ownership, initiative, and adaptability. SCs who thrive with autonomy and are energized by building something new will be well positioned to succeed. This role sits at the forefront of building ServiceNow's Identity & Security GTM, offering Solution Consultants the opportunity to drive impact, establish best practices, and help define what "great" looks like as the business scales. Key Responsibilities: - Customer Engagement & Solution Design: Partner with Sales to lead discovery, solution design, and technical validation for Identity & Security use cases. Engage with customer security, identity, IT, and risk stakeholders to understand requirements, challenges, and success criteria. Design and position solutions that address identity governance, access control, risk reduction, and security automation. - Demonstrations & Technical Leadership: Deliver compelling, value-based demonstrations tailored to customer security and identity priorities. Articulate how identity and security capabilities integrate into broader enterprise workflows and platforms. Serve as a technical authority during evaluations, proof-of-concepts, and competitive situations. - Value & Outcome Positioning: Translate identity and security capabilities into business outcomes such as reduced risk, improved compliance, and operational efficiency. Support executive-level conversations by framing security and identity initiatives in terms of business impact and resilience. Partner with Sales to develop solution narratives that align to customer priorities and buying personas. - Deal Support & Execution: Support complex sales cycles from early discovery through close, ensuring technical accuracy and customer alignment. Identify and mitigate technical or solution-related risks during the sales process. Collaborate with internal teams to ensure solutions are feasible, scalable, and aligned to product capabilities. - Continuous Learning & Collaboration: Stay current on identity, security, and regulatory trends to inform customer conversations. Share field insights and best practices with peers and leadership. Partner with Product, Enablement, and Marketing teams to provide feedback from the field. Participate in a sales-driven, high-accountability culture centered on continuous skill development in a rapidly evolving security market. Qualifications Required Qualifications: - 5+ years of experience in Solution Consulting, Sales Engineering, Pre-Sales, or a related technical role - Track record of strong performance in prior SC roles - expect to demonstrate consistent contribution to technical wins and deal outcomes. - Genuinely curious and proactive in adopting AI and emerging sales support technologies to enhance customer engagements, solution design, and deal execution. - Strong understanding of identity and security concepts, including identity governance, access management, and risk - Ability to quickly learn new technologies, demonstrate their capabilities, and connect them to impactful customer business challenges. - Experience supporting enterprise-level complex sales cycles - Ability to communicate effectively with both technical and business stakeholders - Strong presentation and storytelling skills - able to paint the art of the possible and align solutions to customer priorities. - Willingness to travel as required (typically 25-50%) Preferred Qualifications: - Experience with Identity & Access Management (IAM), Identity Governance & Administration (IGA), or Security Operations platforms - Background in enterprise SaaS or platform-based solutions - Familiarity with compliance and regulatory considerations impacting identity and security programs What Success Looks Like: - Become productive quickly and add immediate value to active pursuits - Deliver high-quality POCs and demos that advance pipeline and build customer confidence - Build trusted-advisor relationships with Sales partners and customers through technical expertise - Demonstrate strong technical credibility and consistent execution across opportunities - Contribute to measurable improvement in win rates and deal quality FD21 For positions in this location, we offer a base pay of $134,250 - $177,900, plus equity (when applicable), variable/incentive compensation and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the base pay shown is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location. We also offer health plans, including flexible spending accounts, a 401(k) Plan with company match, ESPP, matching donations, a flexible time away plan and family leave programs. Compensation is based on the geographic location in which the role is located and is subject to change based on work location. Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2025 Fortune Media IP Limited. All rights reserved. Used under license.
IAM Engineer (Security Team)
TalentgratorAn international company operating in the iGaming industry, focused on building scalable operational processes and supporting business growth across multiple markets. The company works with high-volume financial flows, payment infrastructure, and partner operations, ensuring stability, security, and efficiency across all internal processes. With a strong focus on risk control, fraud prevention, and operational optimization, the team continuously improves internal systems and business processes.
We are looking for an IAM Engineer to join our Security team. The role sits at the intersection of development, infrastructure, and information security. This position is ideal for someone with strong expertise in identity and access management systems, who understands how to implement RBAC models within company processes and is ready to automate routine tasks. What we expect: - Solid understanding of access management processes in large organizations - Hands-on experience with deployment and integration of IdP solutions: Okta / Keycloak / SailPoint - Strong knowledge of RBAC, ABAC, PBAC, and experience embedding access models into IDM systems and company workflows - Understanding of authentication and authorization protocols: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM - Experience with provisioning/deprovisioning automation, onboarding/offboarding processes - Experience with Git and CI/CD pipelines - Understanding of cloud IAM services (e.g., AWS or GCP) - Knowledge of Python or Go for automation tasks Nice to have: - Experience integrating LLMs via APIs / MCP into existing systems - Infrastructure as Code skills (Terraform, Ansible) - Experience with MDM solutions - Familiarity with ELK stack - Experience in incident investigation and participation in CTF challenges
Security Engineer
HighLevelThe all-in-one sales & marketing platform that agencies can white-label. CRM, Email, 2-way SMS, Funnel Builder, & more!
About us HighLevel is an AI-powered business operating system that gives agencies, entrepreneurs and SMBs the infrastructure to build, automate and scale. Today, HighLevel supports SMBs across 150+ countries, fueling community-driven growth rooted in real customer outcomes.To date, businesses operating on HighLevel have generated over $7 billion in ecosystem value, demonstrating the impact of shared infrastructure at scale. By centralizing conversations, automation and intelligence into one system, we help businesses move faster, reduce complexity and execute efficiently.Behind the platform, HighLevel powers more than 4 billion API hits and 2.5 billion message events daily. With 250 terabytes of distributed data, 250+ microservices and over 1 million domain names supported, our architecture is built for performance, resilience and long-term scalability. Our people With over 2,000 team members across 10+ countries, HighLevel operates as a global, remote-first organization built for speed and ownership. We value initiative, clarity and execution, creating space for ambitious people to build systems that support millions of businesses worldwide. Here, innovation thrives, ideas are celebrated and people come first, no matter where they call home. Our impact Every month, HighLevel enables more than 1.5 billion messages, 200 million leads and 20 million conversations for the more than 1 million businesses we support. Behind those numbers are real people building independence, expanding opportunity and creating measurable impact. We’re proud to be a part of that.Learn more about us on our YouTube Channel or Blog Posts Responsibilities - Lead end-to-end PCI DSS compliance, including CDE scoping and reduction, control implementation/validation, and audit management (RoC/SAQ, QSAs). - Lead and support SOC 2 Type II attestation initiatives, including TSC mapping, evidence collection, control testing, and remediation tracking - Support and maintain ISO 27001 ISMS, including risk assessments, SoA, internal audits, and continuous improvement activities - Develop and enforce security policies, standards, and procedures aligned with PCI DSS, SOC 2, and ISO 27001 - Partner with Security, Platform, and Application teams to ensure controls are technically implemented and continuously operating - Collaborate with Security Architecture to review and validate security exceptions and ensure compliance alignment - Track, review, and periodically reassess approved exceptions to minimize long-term risk exposure - Own the Third-Party Risk Management (TPRM) program, including vendor tiering, risk assessments, and security reviews - Evaluate vendor compliance posture, including PCI DSS requirements, and define remediation or contractual controls - Design and manage scalable GRC workflows for risk assessments, vendor reviews, evidence management, and control testing - Perform business impact analysis and support BCDR planning and tabletop exercises - Prepare and present risk, compliance, and third-party security reports to senior leadership - Translate technical risks into business-impact language to support decision-making Qualifications - Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or a related field. - 4.5+ years of experience in GRC, risk management, or compliance, with exposure to technical security controls. - Strong hands-on experience with PCI DSS, including audits, CDE scoping, and control validation - Working knowledge of SOC 2 Type II Trust Services Criteria and audit processes - Experience implementing and maintaining ISO 27001 ISMS, including risk assessments and Annex A controls - Hands-on experience with third-party vendor risk assessments, tiering, and remediation tracking - Ability to interpret technical security concepts such as cloud architecture, network segmentation, access controls, and vulnerability reports - Strong analytical, documentation, and stakeholder communication skills - Experience working in cloud-native or SaaS environments - Certifications such as IPCIP, QSA, CISA, ISO 27001, TPRA or equivalent. - Experience with GRC tools such as Vanta, or ServiceNow GRC - Knowledge of data protection and privacy regulations such as GDPR and CCPA - Familiarity with NIST, CIS Controls, or similar frameworks - Experience in SaaS environments with PCI-in-scope systems EEO Statement: The company is an Equal Opportunity Employer. As an employer subject to affirmative action regulations, we invite you to voluntarily provide the following demographic information. This information is used solely for compliance with government recordkeeping, reporting, and other legal requirements. Providing this information is voluntary and refusal to do so will not affect your application status. This data will be kept separate from your application and will not be used in the hiring decision. #LI-Remote #LI-MS1



