pWe are looking for an experienced bCybersecurity Consultant II /b to join an international cybersecurity team specialising in penetration testing, security assessments, and risk management.
/ppThis role offers the opportunity to work on complex security projects, identify vulnerabilities across diverse technology environments, and help organisations strengthen their security posture.
/ppThe position can be based in bBologna, Villanova di Camposampiero, or Gorizia /b, with remote work also considered for candidates located near a major airport.
/ph3bAbout the Role: /b /h3pYou will independently conduct advanced penetration tests and security assessments across networks, operating systems, cloud infrastructures, web and mobile applications, and APIs.
You will identify vulnerabilities, simulate real-world attack scenarios, and provide practical recommendations to improve clients' security.
/ppYou will also manage projects from planning through delivery, present findings to stakeholders, review technical reports, and provide guidance to junior consultants.
/ph3bKey Responsibilities: /b /h3ulli- Plan and execute complex penetration tests and security assessments across different technologies and environments.
/lili- Manage engagements independently, coordinating with clients, project managers, and technical teams.
/lili- Troubleshoot technical issues, identify root causes, and resolve project blockers.
/lili- Document vulnerabilities, assess risks, and deliver detailed technical reports.
/lili- Present findings and recommend remediation strategies and appropriate security controls.
/lili- Ensure assessments comply with relevant regulatory requirements and quality standards.




/lili- Mentor junior consultants and support their technical development.
/lili- Stay up to date with emerging threats, vulnerabilities, and security testing methodologies.
/lili- Contribute to improvements in internal tools, processes, and technical practices.
/li /ulh3bRequirements: /b /h3ulli- At least 3 years of relevant cybersecurity or penetration testing experience.
/lili- An industry-recognised penetration testing certification, such as OSCP, eCPPT, or GIAC GPEN.
/lili- Strong knowledge of Linux, Windows, networking, web application security, and cloud security.
/lili- Hands-on experience independently conducting network, web application, and API penetration tests.
/lili- Ability to manage projects autonomously from start to finish.
/lili- Strong analytical, troubleshooting, and organisational skills.
/lili- Excellent written and verbal communication skills.
/lili- High attention to detail and a client-focused approach.
/lili- A degree in Computer Science, Information Systems, or a related field is preferred; equivalent professional experience will also be considered.
/li /ulh3bNice to Have: /b /h3ulli- Advanced offensive security certifications, such as OSEP, OSWE, OSED, eWPTX, or CRTO.
/lili- AWS or Azure security certifications or practical cloud security experience.
/lili- Experience in gaming, lottery, or other regulated industries.
/lili- Familiarity with regulatory testing and compliance reporting.
/lili- Scripting skills in Python, PowerShell, or Bash.
/lili- Knowledge of ISO/IEC *****:**** and NIST CSF.
/lili- Experience mentoring colleagues or contributing to security research.
/lili- Exposure to physical security testing, phishing, or social engineering.
/li /ul #J-*****-Ljbffr

📌 Cyber Security Consultant (Bologna)
🏢 Pentasia
📍 Bologna