Offensive Security Specialist

Questa posizione è in Reply

Il processo di selezione sarà interamente gestito Reply.

Questa opportunità è disponibile in Torino - Italy, Milano - Italy.

--

Do you have a passion for offensive security and ethical hacking? Join our team and help evaluate and strengthen the security posture of leading organizations. As an Offensive Security Specialist, you will assess and exploit vulnerabilities in applications, embedded products, network infrastructures and AI-based systems, starting exactly where ordinary vulnerability assessments end. We are Reply , and we are looking for you WHAT WILL YOU DO? Join our forward-thinking team as an Offensive Security Specialist. In this hands-on role, you will focus on evaluating the security posture of our customers by assessing and exploiting vulnerabilities in their applications, embedded products and network infrastructures, working closely with a team that thrives on solving new and unforeseen problems.

• Core activities. Perform penetration tests on network infrastructures, web and mobile applications and embedded/IoT products and AI-based applications, including security audits, code reviews, Red/Purple Team engagements and AI Red Teaming to test the security posture of AI-based applications and models.
• Client engagement . Work hand in hand with our customers, scoping and planning security activities, presenting and discussing your findings, and advising on practical countermeasures that measurably strengthen their security posture.
• Approach & tools. Go beyond running automated VA/PT tools. You will start where ordinary vulnerability assessments end, applying an out-of-the-box mindset to secure large network infrastructures, web portals, mobile applications and embedded/IoT products using exciting and future technologies. You will also harness AI to automate and scale security testing, building scripts and tooling that speed up reconnaissance, vulnerability discovery and exploitation, and applying AI/ML to triage findings, reduce false positives and surface the issues that matter most.
• Team work. Write clear security assessment reports and communicate results effectively to customers' IT teams, collaborating with a very forward-thinking team on challenging engagements.

• Academic background. A Bachelor's or Master's Degree in Information Technology, Information Security or Computer Science.
• Valuable expertise. Scripting and programming skills (e.g., Python, C) and a deep knowledge of the main operating systems (e.g., Windows, Linux/Unix, Android, iOS, macOS).
• Technical skills. Knowledge of OWASP and of networking concepts (e.g., protocols, routing), together with hands-on experience in web application penetration testing. Familiarity with the security of AI/ML systems and Large Language Models (e.g., the OWASP Top 10 for LLM Applications, prompt injection, model evasion) is a strong plus.
• Certifications. Training and certification courses in network security and Ethical Hacking, participation in “Capture The Flag” (CTF) competitions, and research work experience or published CVEs are a definite plus.
• Soft skills. Good presentation and communication skills, with an aptitude for teamwork and flexibility, and a genuine enthusiasm for tackling new and unforeseen problems.
• Passion & curiosity . We are looking for passionate people, eager to explore new challenges, including reinventing security testing through AI and GenAI technologies.
• Languages. Native proficiency in Italian and fluent English, both oral and written.

• An offer tailored to your experience. Your compensation package will be defined based on your professional experience, technical expertise and the level of responsibility associated with the position. The collective labour agreement (CCNL) applied within Reply is the Italian Metalworking Industry Agreement. The position is expected to start from the B1 level, with a gross annual salary (RAL) ranging from € 31,000 to € 45,000. Previous experience and skills in frontier technologies will be considered particularly valuable (e.g., Agentic AI, model training & fine-tuning, and adversarial machine learning).
• A structured career path . Our Career Path offers opportunities to grow both as a technical specialist and as a future leader. Your ambitions, the skills you develop, and the results you achieve will shape your professional journey.
• Continuous learning . Technology evolves rapidly