Cybersecurity Engineer II

<div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>Position Summary</H2></div><div><p>We are looking for a candidate that will join our Cybersecurity team in Pomezia (Rome). The Cybersecurity Engineer II is a specialist working within the STERIS R&D controls department.

The responsibilities include: analyzing software and hardware for potential vulnerabilities, creating work instructions for secure software maintenance, collaborating with product development teams for secure designs, conducting vulnerability assessments, and participating in incident response efforts. He/she will focus on creating and maintaining the security standards that contribute to the safety and integrity of critical healthcare technology.</p></div></div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>Duties</H2></div><div><ul style="margin-bottom: 0cm; margin-top: 0px;" type="disc"><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Receive and analyze CVEs from open‑source sources, determine applicability to STERIS products, and collaborate with product teams to gather information needed for CVE impact and applicability assessments.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Develop and track software bill of materials (SBOM), track vulnerabilities in SBOM, and work with product teams to remediate the vulnerabilities.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Identify potential software security vulnerabilities and collaborate with product teams for remediation and planning.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Assist and support product security risk assessments, requirements analysis, and test methods.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Evaluate and execute product security testing including test planning, cases, and procedure development.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Perform vulnerability assessment and network scanning activities.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Perform internal fuzz testing to identify potential product vulnerabilities.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Reproduce penetration testing findings to help product teams understand security issues and develop effective remediations.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Implement proposed security controls/methods to software embedded in STERIS products and other software applications for the assigned product(s) or project(s).</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Research new techniques and methods to enhance internal security testing practices and improve overall device security.</li></ul></div></div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>Duties - cont'd</H2></div><div><ul style="margin-bottom: 0cm; margin-top: 0px;" type="disc"><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Participate in improvement projects related to Cybersecurity technology, tools, and practices.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Work on cybersecurity assessments and documentation required for FDA 510(k) submissions, including but not limited to security risk management, threat. modeling, security architecture views, vulnerability management, and regulatory compliance deliverables.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Respond to Cybersecurity Questionnaires from STERIS Customers.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Create and update FAQs, White Paper/Knowledge Articles based on commonly asked questions by Customers.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Perform other related and evolving job-related duties as assigned.</li></ul><p> </p></div></div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>Education Degree</H2></div><ul style='margin-top: 0;margin-bottom: 0;' ><li>Bachelor's Degree in Computer Science</li></ul></div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>Required Experience & Competencies</H2></div><div><ul style="margin-bottom: 0cm; margin-top: 0px;"><li style="margin: 0cm 0cm 0cm 0.4px; font-size: 12pt; font-family: arial, helvetica, sans-serif; text-indent: 0.4px; color: black;">Bachelor’s degree in computer engineering, , Software Engineering, or Cybersecurity required.</li><li style="margin: 0cm 0cm 0cm 0.4px; font-size: 12pt; font-family: arial, helvetica, sans-serif; text-indent: 0.4px; color: black;">At least 3 years of direct experience in the field of cybersecurity, conducting cybersecurity risk assessments and security testing.</li><li style="margin: 0cm 0cm 0cm 0.4px; font-size: 12pt; font-family: arial, helvetica, sans-serif; text-indent: 0.4px; color: black;">At least 1 years’ experience in cybersecurity vulnerability assessment and software development lifecycle.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: arial, helvetica, sans-serif;">Knowledge in programming languages like Python, C++/C/C#, Java etc.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: arial, helvetica, sans-serif;">Experience in analyzing penetration test results and recommending corrective actions.</li><li style="color: black; margin-right: 18.75pt; background-color: white; margin-top: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: arial, helvetica, sans-serif;">English at level B2 minimun</li></ul></div></div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>Preferred Experience</H2></div><div><ul style="margin-bottom: 0cm; margin-top: 0px;" type="disc"><li style="color: black; margin-top: 0cm; margin-right: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Experience with vulnerability scanning tools and threat intelligence services is a plus.</li><li style="background-color: white; margin-top: 0cm; margin-right: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif; color: black;">Experience using Threat Modeling tools and conducting penetration testing is desirable</li><li style="color: black; margin-top: 0cm; margin-right: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif;">Software security certification such as SSCP or CISSP is desirable</li><li style="background-color: white; margin-top: 0cm; margin-right: 0cm; margin-bottom: 0cm; font-size: 12pt; font-family: Arial, sans-serif; color: black;">Knowledge of Windows and Linux operating systems and OS configurations is desirable</li><li style="font-family: arial, helvetica, sans-serif;">Experience in writing software security requirements is desirable</li></ul></div></div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>Skills</H2></div><div><ul style="margin-bottom: 0cm; margin-top: 0px;"><li style="margin: 0cm 0cm 0cm 1.6px; font-size: 12pt; font-family: arial, helvetica, sans-serif; text-indent: 0.4px; color: black;">Team player with the ability to interact with multiple product development teams across multiple locations</li><li style="margin: 0cm 0cm 0cm 1.6px; font-size: 12pt; font-family: arial, helvetica, sans-serif; text-indent: 0.4px; color: black;">Keen interest in acquiring technical knowledge of leading techniques, standards and practices related to software system security</li><li style="margin: 0cm 0cm 0cm 1.6px; font-size: 12pt; font-family: arial, helvetica, sans-serif; text-indent: 0.4px; color: black;">Develop knowledge about various types of cyberattacks and appropriate defenses</li><li style="margin: 0cm 0cm 0cm 1.6px; font-size: 12pt; font-family: arial, helvetica, sans-serif; text-indent: 0.4px; color: black;">Strong communication and problem-solving skills</li><li style="margin: 0cm 0cm 0cm 1.6px; font-size: 12pt; font-family: arial, helvetica, sans-serif; text-indent: 0.4px; color: black;">Experience in developing applications/scripts for multiple operating systems</li></ul><p> </p></div></div><div style='padding: 10px 0px;border: 1px solid transparent;'><div style='font-size:16px;word-wrap: break-word;'><H2 style='font-size: 1em; margin: 0px'>Compensation</H2></div><div><p style="font-size: 11pt; font-family: Aptos, sans-serif;">In line with our commitment to transparency and equal pay, we provide the following information:</p><ul><li style="font-size: 12pt; font-family: Aptos, sans-serif;"><strong>Salary Range: </strong>35.000€ - 48.000€ </li><li style="font-size: 12pt;"><strong>NCBA: </strong>Chimica, Concia e Settori Accorpati, CONFAPI</li><li style="font-size: 12pt; font-family: Aptos, sans-serif;"><strong>Bonus eligibility:</strong> This position is eligible for corporate bonus.</li></ul></div></div></div> <p> </p><p>STERIS is a leading global provider of products and services that support patient care with an emphasis on infection prevention.

WE HELP OUR CUSTOMERS CREATE A HEALTHIER AND SAFER WORLD by providing innovative healthcare and life sciences products and services around the globe. For more information, visit <a href="https://www.steris.com">www.steris.com</a>.</p><p>STERIS strives to be an Equal Opportunity Employer. </p>