.
Overview
You will join the Global Security Operation Center, handling the monitoring, analysis and operational management of security events related to systems, applications and business workflows that use frontier LLMs, AI agents, RAG and generative capabilities integrated into business processes.
What your tasks will be
- Detect and investigate threats to the company's AI systems
- Collaborate with the Security Operations, Threat Intelligence, Application Security, Cloud Security, Data Governance and AI Platform teams to develop detection and response capabilities
- Analyse and manage alerts related to LLMs, AI agents, RAG systems and agentic workflows
- Investigate attempts at prompt injection, jailbreaks, context manipulation, abuse of integrated tools and anomalous access
- Support AI incident response, with a focus on data leakage, unauthorised actions and compromised information
- Define and improve detection use cases by integrating logs, telemetry, audit trails, IAM, DLP, SIEM and XDR
- Analyse patterns of abuse of frontier LLMs and translate them into monitoring rules and playbooks
- Maintain a knowledge base on attack techniques, and you will document evidence, TTPs, impacts and operational recommendations
Who we are looking for
If you have the following characteristics, we are waiting for you:
- 3-5 years of experience in the role
- Solid knowledge of Detection & Response tools such as SIEM, XDR, SOAR, EDR, NDR, DLP, IAM and monitoring platforms
- Knowledge of the main risks related to LLMs, AI agents and RAG systems, including prompt injection, jailbreaks, data leakage, data poisoning, model extraction and tool abuse
- Experience analysing application logs, audit trails, API events, cloud telemetry and security data
- Experience optimising detection use cases, correlation and response playbooks
- Scripting and data analysis skills with Python, KQL or equivalent tools
- Knowledge of modern application architectures, APIs, cloud, identity providers and security controls
- Familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, MITRE ATT&CK and NIST AI RMF
What we offer
-
Gross annual salary starting from €45.000
-
The Group provides a variable component of remuneration as governed by the Remuneration Policies available on the Group website
-
Complementary elements governed by the National Collective Labour Agreement for Credit and second-level company agreements
-
Professional development initiatives supporting the growth of our people
-
Wide training offer through the Corporate Academy, dedicated to the continuous development of professional, managerial and transversal skills at all levels
-
Possibility to opt for flexible work and the 4x9 compressed work week
-
Modern and integrated corporate welfare system (link)
-
Health coverage and supplementary pension from the start of employment
-
Advantages on the Group's banking products and services
About us
We are leaders in Italy and one of the main banking groups in Europe. Join us and become part of our success story! With over 20 million customers in Italy and abroad, we are a true engine of sustainable growth with a strong commitment to the environment and a tangible impact on society.
People are at the centre; we take care of them by committing to create an inclusive culture within the Group where everyone feels like a protagonist and valued.
The Chief Security Officer Governance Area oversees physical security, cybersecurity and business continuity of the Group in an integrated way, leveraging specialist skills and advanced technological solutions, with the aim of guaranteeing high security standards at an international level.
The Area includes the Security Staff, Group Security Planning & Models Monitoring, Corporate and Physical Security and Cybersecurity, Antifraud & Business Continuity Management structures, ensuring a coordinated and cross-cutting approach to the protection of the Group.
Join our international reality. The future does not wait, it is chosen!
#sharingfuture
We guarantee an inclusive environment and equal opportunities. We will consider all applications regardless of race, religion, sexual orientation, gender identity, marital status, age, disability or any other protected category in compliance with Legislative Decrees 198/2006, 215/03 and 216/03.
For the evaluation of applications, the data will be used by Intesa Sanpaolo S.p.A. as Data Controller. We invite you to review the dedicated Privacy Notice.