Vulnerability Management Specialist

Are you passionate about turning security data into action? Join our team and help leading organizations stay ahead of emerging threats by identifying, prioritizing and closing the vulnerabilities that put their business at risk. As a Vulnerability Management Specialist, you will own the vulnerability lifecycle end-to-end, combining continuous monitoring, risk-based prioritization and AI-powered analytics to keep our customers' attack surface under control.

We are Reply, and we are looking for you

WHO WE ARE

Reply is a company that specializes in Consulting, Systems Integration and Digital Services with a focus on the conception, design and implementation of solutions based on the new communication channels and digital media. Reply partners with key industrial groups in defining and developing business models made possible by the new technological and communication paradigms such as Artificial Intelligence, Big Data, Cloud Computing, Cybersecurity, Digital Communication, the Internet of Things and Mobile and Social Networking.

WHAT WILL YOU DO?

Become part of our forward-thinking team as a Vulnerability Management Specialist. In this hands-on role, you will help our customers keep pace with an ever-changing threat landscape, running vulnerability management programs across their applications, infrastructures and AI-based systems, side by side with a team that thrives on solving new and unforeseen problems.

• Core activities. Design, run and continuously improve vulnerability management programs spanning network infrastructures, web and mobile applications, cloud environments and AI-based systems: scanning, risk scoring, remediation follow-up and reporting, plus dedicated assessments to map the exposure of AI-based applications and models.
• Client engagement. Partner closely with our customers to scope and plan vulnerability management activities, walk them through your findings, and guide them toward remediation choices that make a measurable dent in their risk exposure.

• Approach & tools. Automated scanners are only the starting point. You will design and continuously tune vulnerability management processes for large network infrastructures, web portals, mobile applications, cloud environments and AI-based systems, bringing a risk-based, out-of-the-box mindset to every engagement. AI will be part of your everyday toolkit: you will build scripts and tooling that speed up detection, correlation and prioritization, and apply AI/ML models to triage vulnerabilities, cut through false positives and spotlight the issues that truly matter.

• Team work. Turn your findings into clear, actionable reports for customers' IT teams, and collaborate with a highly forward-thinking team on some genuinely challenging engagements.

WHAT WE ARE LOOKING FOR

• Academic background. A Bachelor's or Master's Degree in Information Technology, Information Security or Computer Science.

• Valuable expertise. Scripting and automation skills (e.g., Python) and a solid knowledge of the main operating systems (e.g., Windows, Linux/Unix) and cloud environments, together with familiarity with vulnerability scanning and IT asset management tools.
• Technical skills. Knowledge of OWASP and of networking concepts (e.g., protocols, routing), together with hands-on experience in vulnerability assessment and management, CVSS scoring and risk-based prioritization methodologies. Familiarity with the security of AI/ML systems and Large Language Models (e.g., the OWASP Top 10 for LLM Applications) is a strong plus.

• Certifications. Training and certification courses in network security and vulnerability management (e.g., CompTIA Security+, eJPT, CEH), participation in “Capture The Flag” (CTF) competitions, and research work experience or published CVEs are a definite plus.

• Soft skills. Strong communication and presentation abilities, a collaborative and flexible attitude, and real enthusiasm for tackling new and unexpected problems.
• Passion & curiosity. We are looking for passionate people, eager to explore new challenges, including reinventing vulnerability management through AI and GenAI technologies.

• Languages. Native proficiency in Italian and fluent English, both oral and written.

WHAT WE OFFER

• An offer tailored to your experience. Your compensation package will be defined based on your professional experience, technical expertise and the level of responsibility associated with the position. The collective labour agreement (CCNL) applied within Reply is the Italian Metalworking Industry Agreement. The position is expected to start from the B1 level, with a gross annual salary (RAL) ranging from € 31,000 to € 45,000. Previous experience and skills in frontier technologies will be considered particularly valuable (e.g., Agentic AI, model training & fine-tuning, and adversarial machine learning). 
• A structured career path. Our Career Path offers opportunities to grow both as a technical specialist and as a future leader. Your ambitions, the skills you develop, and the results you achieve will shape your professional journey. 
• Continuous learning. Technology evolves rapidly - and so do we. You will join an environment that encourages curiosity, continuous learning, and the exploration of new ideas and emerging technologies. 
• The benefits of being a Replyer. You will also have access to the benefits dedicated to our Community.

WHAT ARE THE NEXT STEPS

The first step of our recruiting process will be the meetings with the technical referents and then a face-to-face interview with the HR team. We care about an equal recruiting process.

If you are passionate about offensive security and ethical hacking and eager to work in an innovative environment, we invite you to apply and join our penetration testing team.

Feel interested?