{"id":2122537,"url":"https://alion.io/job/net-a-porter-cyber-security-engineer","title":"Cyber Security Engineer","company":{"id":172344,"name":"Net-a-Porter","domain":"net-a-porter.com","url":"https://alion.io/company/net-a-porter","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":97,"open_postings":11,"ghost_share":0,"stale_share":0.273,"repost_share":0.091,"time_to_fill_p50_days":21,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bologna, Italy","Barcelona, Spain","Berlin, Germany","Milan, Italy","Aschheim, Germany","London, United Kingdom"],"countries":["IT","ES","DE","GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":49500,"max":null,"currency":"EUR","period":"year","gross":true,"usd_annual":54606},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Akamai","optional":false},{"name":"Configuration Management","optional":false},{"name":"DNS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"CyberArk","optional":true},{"name":"Python","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-09-08T00:00:00Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-14T20:33:46Z","board_verified":true,"closed_at":null,"days_open":67,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":67},"description":"LuxExperience is the leading digital, multi-brand luxury group and the online shopping destination for luxury enthusiasts worldwide. LuxExperience operates a portfolio of some of the most distinguished store brands in digital luxury and creates communities for luxury enthusiasts with unique digital and physical experiences. Mytheresa, NET-A-PORTER and MR PORTER, jointly comprising the luxury segments of LuxExperience, offer highly curated edits of the most prestigious luxury brands across the world, featuring womenswear, menswear, kidswear, fine jewelry & watches, and lifestyle products. YOOX, which forms the off-price segment of LuxExperience, is the leading destination for multi-brand off-season online luxury shopping. The NYSE listed group operates worldwide.\nTo support our Cyber Security team we are searching for a Cyber Security Engineer to be based in our Zola Predosa office. The Cyber Security Platform team oversees the operations of all cyber security services within the company, employing expertise across a range of technologies and tools to deliver and safeguard company assets, while ensuring the protection of both end customers and internal staff.\nAs a specialised Cyber Security Engineer, you will be the go-to expert for our Akamai Security Platform. You will drive the analysis, technical design, configuration, and continuous tuning of our edge security solutions. Collaborating directly with development, DevOps, and infrastructure teams, you will ensure our web applications and APIs are resilient against attacks, highly available, and fully optimized. Some of the essentials for you to know are:\nLocation: Open to; Zola Predosa / Milan/ Berlin/ Munich/ Barcelona/ London\nDepartment: Infrastructure and Operations - Cyber Security\nReporting into: Cyber Security Platform Manager\nWorking Model: Hybrid\nContract Type: Permanent\nHere is a breakdown of what you’ll be doing:\nEdge Security Management: Design, provision, configure, and maintain Akamai security configurations, specifically focusing on App & API Protector, Akamai WAF, Bot Manager and Content Protector.\n WAF & Rate Limiting Optimization: Continuously monitor and tune Web Application Firewall (WAF) rules and rate limiting policies to minimize false positives while maintaining a strict security posture against the OWASP Top 10.\n DDoS & Botnet Mitigation: Identify, analyze, and mitigate real-time DDoS attacks and malicious automated bot traffic (e.g., credential stuffing, scraping) without disrupting legitimate user traffic or search engine crawlers.\nAPI Security: Implement and manage security controls tailored for APIs, ensuring positive security models, schema validation, and discovery of unmanaged endpoints.\nCross-Functional Collaboration: Partner with application developers and product teams to translate business requirements into secure, scalable edge configurations and assist in troubleshooting application-layer issues.\nDocumentation & Automation: Produce clear, comprehensive technical documentation for edge configurations, incident playbooks, and operational procedures. Identify opportunities to leverage Akamai CLI, Terraform, or APIs to automate configuration management.\nPlatform Lifecycle: Manage the lifecycle of security services, including monitoring platform health, reviewing Akamai release updates, and implementing platform best practices.\nThe type of person we are looking for:\nEnjoys working in a collaborative team environment and contributes positively to shared goals.\nCommunicates effectively in English, both spoken and written, with the ability to tailor technical concepts to different audiences.\nCurious, proactive, and eager to learn, with a willingness to step outside their comfort zone to explore new technologies and approaches.\nAble to manage multiple tasks and priorities, maintaining attention to detail while delivering high-quality output.\nComfortable working in dynamic environments and adapting to evolving business and security needs.\nTechnical skills and experience:\nCore Requirements (Akamai & Web Security)\n Akamai Platform Expertise: Hands-on experience managing and configuring Akamai security solutions (App & API Protector, Bot Manager, Client-Side Protection, Edge DNS).\nWeb & API Security: Deep understanding of web application security principles, including the OWASP Top 10 and API Security Top 10.\nTraffic Analysis: Proficiency in analyzing HTTP/S traffic, utilizing web logs, Akamai Control Center, or SIEM dashboards to investigate alerts and anomalies.\nNetwork Protocols: Strong fundamental knowledge of core internet protocols, including TCP/IP, HTTP/HTTPS, and advanced DNS administration in enterprise environments.\nCertificate Management: Solid understanding of TLS/SSL certificate lifecycles, renewals, and proper implementation at the edge layer.\nSecondary/Nice-to-Have Experience:\n Infrastructure Security: Familiarity with traditional firewall management principles (e.g., Check Point).\n Identity & Access: Exposure to cloud-based Secure Web Gateways (e.g., Zscaler), Multi-Factor Authentication (e.g., Duo), or Privileged Access Management (e.g., CyberArk).\n Security as Code: Experience with automation tools or scripting languages (e.g., Python, Bash, Terraform) utilized for managing Akamai configurations is a significant plus.\nStarting annual gross base salary: €49,500. Final compensation may vary based on relevant experience, qualifications and objective, gender-neutral criteria applied during the selection process.\nCollective Bargaining Agreement: CCNL Terziario, Distribuzione e Servizi (Commercio).\nFrom the moment you join LuxExperience, we are committed to making your journey with us inspirational and evolutionary. If you are passionate, committed and thrive in a collaborative and fast-paced environment, then please apply with a CV.\nLuxExperience is an equal opportunities employer, we encourage people with a diverse range of backgrounds to apply. We recognize and celebrate the benefits that diversity brings to our workplace, our business and our customers. We welcome and will consider all applications regardless of race and nationality, religion, color, sex, pregnancy or related medical conditions, parental status, sexual orientation, gender identity, gender expression, age, status as an individual with a disability, or any other legally protected characteristics.\nIf you require any reasonable adjustments to complete your application, please do not hesitate to advise us accordingly.\nExperience Level: Mid-Senior levelWorkplace Type: Hybrid","description_format":"text","description_chars":6550,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Italy","iso":"IT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Luxury Retail","Luxury Goods & Designer Brands","Application Security"],"lifecycle":[{"event":"open","at":"2026-10-09T00:08:18Z"},{"event":"close","at":"2026-10-17T11:36:59Z"},{"event":"reopen","at":"2026-11-13T23:25:12Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.632,"p_room":0.28,"age_days":67,"expected_fill_days":21,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-11-14T05:58:10Z"},"pay":{"stated_usd_annual":54606,"is_top_pay":false},"html_url":"https://alion.io/job/net-a-porter-cyber-security-engineer","json_url":"https://alion.io/job/net-a-porter-cyber-security-engineer.json","meta":{"generated_at":"2026-11-14T21:46:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28175,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":172344},"rest":"https://alion.io/mcp/rest/get_company?id=172344"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnet-a-porter-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnet-a-porter-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnet-a-porter-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/net-a-porter-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnet-a-porter-cyber-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2122537}},{"tool":"search_jobs","arguments":{"company":"net-a-porter.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2122537},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}