Cyber Security Offensive - Lead (IT/OT)

Where passion meets opportunity

The best of your adventures is the one you have yet to sail!

JOB PURPOSE

MSC Cruises is recruiting a Cyber Security Offensive Lead (IT/OT), based in Naples, to join its Cyber Security department. The role requires strong offensive security expertise and proven leadership capabilities to define and execute the offensive security program across IT and OT environments, including penetration testing, red and purple team operations, adversary emulation, attack surface management and security validation.
The Lead owns IT offensive activities, personally performing penetration tests and technical rechecks to verify remediation. For OT environments across ships, terminals and operational facilities, the Lead coordinates specialized third-party assessments, validates deliverables and ensures safe execution. Working with security architects, Cyber Defense and SOC teams, the role manages partners and drives vulnerabilities to verified closure.

KEY ACCOUNTABILITIES

• Define and maintain the offensive security roadmap, aligned with cyber strategy, risk appetite, policies, standards and the evolving threat landscape.
• Lead and mentor offensive security specialists and consultants, setting methodologies, standards and rules of engagement.
• Own IT offensive security by personally leading penetration tests, cloud, infrastructure, application and wireless assessments, adversary emulation and red team engagements.
• Perform IT technical rechecks to confirm remediation and provide evidence to close findings.
• Own shipboard and terminal OT offensive security delivered by third parties: select providers, approve scope and methods, oversee execution and validate outputs.
• Ensure OT testing is safe and has minimal operational impact, coordinating with OT Engineering, Marine Operations, Terminal Operations and Infrastructure teams.
• Validate internal and third-party offensive reports for technical quality, risk rating accuracy and actionable remediation guidance.
• Drive remediation of offensive security findings: assign owners, agree plans and due dates, and track closure against severity-based service levels.

QUALIFICATIONS (skills, competencies, experience)

• Degree in cyber security, computer science, engineering or a related discipline.
• 8+ years in offensive cyber security, including 3+ years leading penetration testing, red teaming, adversary emulation or security validation programs.
• Strong hands-on offensive capability across penetration testing, technical rechecks, exploit validation, vulnerability research, attack path analysis and external attack surface management.
• Advanced understanding of offensive of cloud solutions (e.g. Azure, Amazon, etc.), networking, web applications, containers, IAM and Zero Trust from an attacker perspective.
• Knowledge of offensive and assurance frameworks such as MITRE ATT&CK, OWASP, NIST, CVSS, CIS Controls, IEC 62443 and NIST SP 800-82.
• Experience with OT/ICS, SCADA, maritime technology and safe OT testing is a plus.
• Proven ability to manage offensive security suppliers, scopes of work, testing rules of engagement and consulting delivery in complex enterprise environments.
• Ability to drive vulnerability remediation with technical and business owners, using vulnerability management and ticketing platforms such as ServiceNow.
• Based in Naples, available to travel to vessels, terminals and MSC sites for assessment activities; Italian and fluent English required (30% time travelling).
• Offensive-minded technical leader with strong critical thinking, attention to detail, pragmatic decision making and clear communication with suppliers, system owners and management.
• Able to manage multiple offensive engagements and priorities in a fast-paced international environment.
• Preferred offensive certifications: OSCP, OSEP, OSWE, CRTO, GPEN, GXPN or equivalent, IEC 62443 qualification is an advantage.

VISA REQUIREMENTS

• Right to work in Italy

WHAT WE OFFER

In compliance with the applicable pay transparency legislation, the following information is provided regarding the initial compensation foreseen for the position.
Contract
- Type of contract: Permanent
- Hybrid working model: 2 days per week remotely
- Applicable Collective Labour Agreement (CCNL): “Addetti agli uffici ed ai terminals delle società di navigazione che esercitano l’armamento privato” – sez. personale di terra
- Gross annual salary (RAL): between €50.000 – €57.000 gross per year, paid over 14 monthly installments
- Meal vouchers: worth €8 per on-site working day
The offer in terms of salary will be determined based on the candidate’s professional experience, technical competencies, and the level of autonomy and responsibility assigned to the role.
Welfare&Wellbeing
We offer a range of Welfare&Wellbeing Initiatives as well as benefits including Productivity award, Health Insurance, Learning opportunities, flexible working hours, Employee Assistance Programme, Discounts & Partnerships within the MSC group.

Our commitment

We are committed to building a future that values diverse perspectives, embraces the world beyond borders, and fosters an inclusive environment where every individual feels valued, respected and empowered to be their authentic selves. Our commitment extends to taking meaningful, measurable actions that have a long-term positive impact on our guests, our employees and our planet.