2 months ago
Turin, ItalySenior
Responsibilities
- Secure the data, software, and cloud platforms entrusted to Arduino.
- Advise development and DevOps teams on security best practices and provide security guidance for new projects and technologies.
- Provide expertise in architecture, authentication, and system security.
- Design, implement, and manage AWS security solutions using infrastructure as code technologies.
- Implement and manage AWS Security Hub, GuardDuty, Inspector, CloudTrail, WAF, KMS, Config, and IAM Access Analyzer.
- Build secure CI/CD pipelines using DevSecOps principles and AI Security Agent technologies.
- Build internal tools to detect and respond to security problems and incidents.
- Monitor cloud environments for security incidents and anomalies and respond to suspected incidents.
- Integrate standardized security controls into cloud environments with infrastructure and application development teams.
- Implement controls aligned with RED, EN18031, and CRA requirements.
- Prioritize vulnerability management activities, including CVE triage, CVSS scoring, coordinated disclosure, and collaboration with external reporters.
- Maintain alignment with ISO 27001 and define organization-wide security policies and employee training.
Requirements
- Bachelor’s degree in Engineering, Information Systems, Computer Science, or a related field and 6+ years of software engineering or related experience; or a master’s degree and 5+ years; or a PhD and 4+ years.
- At least 3 years of experience with a programming language such as C, C++, Java, or Python.
- At least 5 years of security engineering or comparable DevOps/SRE experience.
- Experience with Docker and Kubernetes containerization and orchestration.
- Strong background in host, network, and cloud security and experience designing secure cloud-native systems.
- Experience with applied cryptography, including PKI, TLS, and key management.
- Expertise with modern programming languages and software versioning tools such as Git and GitHub.
- Knowledge of security compliance standards and regulations including ISO 27001, SOC, NIST, GDPR, CIS, and CRA.
- Knowledge of internet security issues and threat frameworks including OWASP, STRIDE, MITRE ATT&CK, and CWE.
- Experience with security monitoring, incident detection, and incident response.
- Experience with vulnerability management, threat modeling, risk assessment, and risk mitigation in cloud, web, or IoT ecosystems.
- Strong written and oral English communication skills and ability to explain technical concepts to nontechnical audiences.
- Preferred experience with infrastructure and DevOps, AWS or GCP, Cloudflare, Auth0, Datadog, Arduino or other microcontrollers, hardware security, and Go.
Benefits
- Competitive salary and benefits, including a discretionary annual bonus program and potential annual RSU grants.
- Flexible working hours and working locations with an emphasis on work-life balance.
- Dedicated budget for learning and training and individual growth objectives.
- Diversity-focused, collaborative, and culturally international work environment.
- Sport or gym benefit, office events, happy hours, drinks and snacks, and rooftop lunch areas for employees near an office.
- The posted annual salary range is €67,200.00–€100,800.00 gross and includes two additional months of pay.
Tech Stack
Categories
About Qualcomm
Qualcomm is a public semiconductor company headquartered in San Diego, founded in 1985, that designs and sells wireless chipsets and platforms for mobile devices, automotive, IoT, and networking, notably the Snapdragon application processors and 5G modems. It also licenses a large portfolio of cellular patents to device makers, generating revenue alongside chip sales; its technology underpins many Android smartphones and emerging automotive and edge-compute systems, and it trades on NASDAQ as QCOM.