Cyber Security Architecture - Application Specialist

Where passion meets opportunity

The best of your adventures is the one you have yet to sail!

JOB PURPOSE

MSC Cruises is recruiting a Cyber Security Application Specialist to join its Cyber Security Architecture department. The successful candidate will have a background in application security with a strong interest in secure software design, DevSecOps, and modern application architectures. The role is responsible for supporting the adoption of security-by-design principles across custom-developed and enterprise applications, securing application exposure, embedding security controls throughout the software development lifecycle and working closely with development, engineering, architecture, and product teams.

KEY ACCOUNTABILITIES

• Support the design and implementation of security controls and architectures for custom-developed, packaged, web, and mobile applications.
• Collaborate with development, DevOps, architecture, and product teams to embed security-by-design principles throughout the Secure Software Development Lifecycle (SSDLC).
• Support the adoption of DevSecOps practices and the integration of security controls into CI/CD pipelines, including SAST, DAST, software composition analysis, and secrets management.
• Review application architectures and technical designs from a cyber security perspective, identifying security requirements and recommending appropriate controls.
• Provide guidance on secure authentication, authorization, APIs, session management, cookies, tokens, and application integration security.
• Support the security assessment and onboarding of enterprise applications and third-party software solutions.
• Provide guidance on web, API, and mobile application security practices, leveraging OWASP standards and industry best practices.
• Support the implementation and review of application protection technologies, including WAF, API protection, and bot management solutions.
• Analyze and validate application security findings, helping development teams understand risks and identify appropriate corrective actions.
• Contribute to the definition and maintenance of application security standards, patterns, guidelines, and reference architectures.
• Perform security rechecks and targeted validation activities when required.

QUALIFICATIONS (skills, competencies, experience)

• A degree in computer science or engineering, cyber security, or a related qualification.
• Italian as primary language and fluent English.
• 2-5 years' experience in application security or software development with a security focus.
• Knowledge of and experience with CI/CD security controls, SAST, DAST, software composition analysis, and secrets management.
• Knowledge of web, API, and mobile application security principles, including OWASP standards.
• Understanding of authentication, authorization, web security (CSP, CORS, session management, cookies, tokens, etc.), and application integration security.
• Familiarity with WAF, API protection, and bot management technologies.
• Ability to work effectively with developers, architects, DevOps engineers, and technical stakeholders.
• Good communication, analytical, documentation, and problem-solving skills.
• Familiarity with AI-enabled applications and AI-assisted development is considered a plus.
• Experience with Checkmarx, Akamai, Cloudflare, or similar technologies is considered an advantage.
• Experience in software development is considered an advantage.
• CSSLP (Certified Secure Software Lifecycle Professional) or similar security certifications are a plus.

VISA REQUIREMENTS

• Right to work in Italy

WHAT WE OFFER

- Type of contract: Permanent
- Hybrid working model: 2 days per week remotely
- Applicable Collective Labour Agreement (CCNL): “Addetti agli uffici ed ai terminals delle società di navigazione che esercitano l’armamento privato” – sez. personale di terra
- Gross annual salary (RAL): between €33.000 – €37.000 gross per year, paid over 14 monthly installments
- Meal vouchers: worth €8 per on-site working day
The offer in terms of salary will be determined based on the candidate’s professional experience, technical competencies, and the level of autonomy and responsibility assigned to the role.
Welfare&Wellbeing
We offer a range of Welfare&Wellbeing Initiatives as well as benefits including Productivity award, Health Insurance, Learning opportunities, flexible working hours, Employee Assistance Programme, Discounts & Partnerships within the MSC group.

Our commitment

We are committed to building a future that values diverse perspectives, embraces the world beyond borders, and fosters an inclusive environment where every individual feels valued, respected and empowered to be their authentic selves. Our commitment extends to taking meaningful, measurable actions that have a long-term positive impact on our guests, our employees and our planet.