Cyber Security Defense WAF Junior Specialist","@context":"http://schema.org","occupationalCategory":"Information Technology

JOB PURPOSEMSC Cruises is seeking a Cyber Security Defense WAF Junior Specialist to join its Cyber Defense team. The successful candidate will support the protection of business-critical web applications and APIs by monitoring security events, assisting with WAF policy administration, documenting findings, and escalating identified threats in accordance with established procedures.

This early-career role is designed for a professional building foundational expertise in web application security through structured learning, supervised execution, and progressively increasing autonomy.

KEY ACCOUNTABILITIES• Monitor WAF alerts, events, and security logs by following established procedures.

• Support the configuration, maintenance, and testing of WAF security policies under appropriate guidance.

• Assist with the initial analysis of suspected web application attacks and escalate findings to senior team members.

• Execute false-positive checks, document results, and contribute observations for security policy improvements.

• Support routine activities protecting web applications, APIs, and public-facing digital services.

• Contribute to investigations of security incidents related to web application threats by collecting and documenting relevant evidence.

• Prepare operational reports, dashboards, and technical documentation using established templates.

• Assist Cyber Security, Infrastructure, Network, and Application teams with agreed application security activities.

• Learn and apply approved methods, tools, and standards while contributing to continuous improvement within the Cyber Defense function.

QUALIFICATIONS (skills, competencies, experience)• Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or a related discipline, or equivalent foundational training.

• Up to 2 years of experience in Cyber Security, Application Security, Network Security, or related areas; relevant internships or academic projects may be considered.

• Fluent in Italian and English, both written and spoken.

• Foundational analytical, troubleshooting, and problem-solving skills.

• Ability to work collaboratively, follow guidance, and learn in a dynamic and international environment.

Technical Skills – Web Application & API Security

• Understanding of Web Application Firewall (WAF) technologies and security policy management.

• Knowledge of web application and API protection principles.

• Familiarity with attack detection, policy tuning, and security event analysis.

• Understanding of bot mitigation and application-layer protection concepts.

• Ability to perform an initial review of security events, recognize suspicious web traffic patterns, and escalate findings.

Technical Skills – Application Security Fundamentals

• Knowledge of OWASP Top 10 vulnerabilities and web application attack techniques.

• Understanding of common threats such as SQL Injection (SQLi), Cross-Site Scripting (XSS), Command Injection, Directory Traversal, and Cross-Site Request Forgery (CSRF).

• Familiarity with false positive analysis and rule optimization.

• Basic understanding of API security concepts and best practices.

Technical Skills – Networking & Internet Technologies

• Understanding of TCP/IP, DNS, TLS, and Internet protocols.

• Basic knowledge of web application architectures and traffic flows.

• Familiarity with security logging, monitoring, and incident analysis.

Preferred Certifications

• Akamai Web Application & API Protection (WAAP) Fundamentals / Foundations.

• Cloudflare Application Security Associate (Associate Level).

• CompTIA Security+.

• OWASP Web Application Security Foundations (or equivalent).

Personal Attributes

• Passion for cybersecurity and application security.

• Strong attention to detail and investigative mindset.

• Willingness to learn and develop expertise in WAF and API security technologies.

• Good communication, teamwork, and willingness to seek guidance when needed.

• Structured approach to problem solving, with attention to procedures, documentation, and continuous learning.

VISA REQUIREMENTS• Right to work in Italy

WHAT WE OFFERIn compliance with the applicable pay transparency legislation, the following information is provided regarding the initial compensation foreseen for the position.

Contract 

- Type of contract: Permanent

- Hybrid working model: 2 days per week remotely

- Applicable Collective Labour Agreement (CCNL): “Addetti agli uffici ed ai terminals delle società di navigazione che esercitano l’armamento privato” – sez. personale di terra

- Gross annual salary (RAL): between €28.000 – €32.000 gross per year, paid over 14 monthly installments

- Meal vouchers: worth €8 per on-site working day

The offer in terms of salary will be determined based on the candidate’s professional experience, technical competencies, and the level of autonomy and responsibility assigned to the role.

Welfare&Wellbeing

We offer a range of Welfare&Wellbeing Initiatives as well as benefits including Productivity award, Health Insurance, Learning opportunities, flexible working hours, Employee Assistance Programme, Discounts & Partnerships within the MSC group.

Our commitment

We are committed to building a future that values diverse perspectives, embraces the world beyond borders, and fosters an inclusive environment where every individual feels valued, respected and empowered to be their authentic selves. Our commitment extends to taking meaningful, measurable actions that have a long-term positive impact on our guests, our employees and our planet.

Ready to turn your passion into something extraordinary? Join us at MSC Cruises, where new opportunities await. Apply today to be part of a global team that is pushing boundaries and achieving something remarkable. Your journey starts here!