Offensive Security Specialist

Reply; Lombardia; Presencial; EUR 31.000 - 45.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Career path

Continuous learning

Risorse e benefit Reply

Descripción de la vacante

Reply cerca un Offensive Security Specialist per valutare e rafforzare la postura di sicurezza dei nostri clienti, analizzando vulnerabilità in applicazioni, dispositivi embedded, reti e sistemi basati su AI.

Il ruolo richiede competenze in Python/C, conoscenza OWASP, test di penetrazione web/mobile e familiarità con AI/ML e modelli LLM; offrendo opportunità di crescita e un pacchetto retributivo da 31.000 a 45.000 euro lordi all'anno.

Formación

• Laurea triennale o magistrale in Informatica o Sicurezza Informatica.
• Competenze di scripting (Python, C) e conoscenza dei principali OS (Windows, Linux/Unix, Android, iOS, macOS).
• Conoscenza OWASP e di penetration testing web; familiarità con AI/ML e LLM è un plus.
• Certificazioni in security di rete ed Ethical Hacking; esperienza in CTF è un plus.
• Abilità di presentazione, lavoro di squadra e flessibilità; passione per nuove sfide.

Responsabilidades

• Eseguire test di penetrazione su reti, app web e mobili, sistemi embedded/IoT e applicazioni IA.
• Gestire engagement con i clienti, definire scope, pianificare attività e presentare i risultati.
• Andare oltre tool automatici, utilizzare AI per automatizzare test e creare tooling.
• Redigere report chiari di sicurezza e comunicare ai team IT del cliente.

Conocimientos

Scripting

Python

C

Networking

OWASP

Penetration testing

AI/ML security

Teamwork

Comunication

Educación

Laurea triennale/magistrale in IT/Security/CS

Herramientas

Python

C

AI/ML tooling

Descripción del empleo

Questa posizione è in Reply

Il processo di selezione sarà interamente gestito Reply.

--

Do you have a passion for offensive security and ethical hacking? Join our team and help evaluate and strengthen the security posture of leading organizations. As an Offensive Security Specialist, you will assess and exploit vulnerabilities in applications, embedded products, network infrastructures and AI-based systems, starting exactly where ordinary vulnerability assessments end. We are Reply, and we are looking for you!

WHAT WILL YOU DO?

Join our forward-thinking team as an Offensive Security Specialist. In this hands‑on role, you will focus on evaluating the security posture of our customers by assessing and exploiting vulnerabilities in their applications, embedded products and network infrastructures, working closely with a team that thrives on solving new and unforeseen problems.

• Core activities. Perform penetration tests on network infrastructures, web and mobile applications and embedded/IoT products and AI-based applications, including security audits, code reviews, Red/Purple Team engagements and AI Red Teaming to test the security posture of AI-based applications and models.
• Client engagement. Work hand in hand with our customers, scoping and planning security activities, presenting and discussing your findings, and advising on practical countermeasures that measurably strengthen their security posture.
• Approach & tools. Go beyond running automated VA/PT tools. You will start where ordinary vulnerability assessments end, applying an out-of-the-box mindset to secure large network infrastructures, web portals, mobile applications and embedded/IoT products using exciting and future technologies. You will also harness AI to automate and scale security testing, building scripts and tooling that speed up reconnaissance, vulnerability discovery and exploitation, and applying AI/ML to triage findings, reduce false positives and surface the issues that matter most.
• Team work. Write clear security assessment reports and communicate results effectively to customers' IT teams, collaborating with a very forward‑thinking team on challenging engagements.

WHAT WE ARE LOOKING FOR

• Academic background. A Bachelor's or Master's Degree in Information Technology, Information Security or Computer Science.
• Valuable expertise. Scripting and programming skills (e.g., Python, C) and a deep knowledge of the main operating systems (e.g., Windows, Linux/Unix, Android, iOS, macOS).
• Technical skills. Knowledge of OWASP and of networking concepts (e.g., protocols, routing), together with hands‑on experience in web application penetration testing. Familiarity with the security of AI/ML systems and Large Language Models (e.g., the OWASP Top 10 for LLM Applications, prompt injection, model evasion) is a strong plus.
• Certifications. Training and certification courses in network security and Ethical Hacking, participation in “Capture The Flag” (CTF) competitions, and research work experience or published CVEs are a definite plus.
• Soft skills. Good presentation and communication skills, with an aptitude for teamwork and flexibility, and a genuine enthusiasm for tackling new and unforeseen problems.
• Passion & curiosity. We are looking for passionate people, eager to explore new challenges, including reinventing security testing through AI and GenAI technologies.
• Languages. Native proficiency in Italian and fluent English, both oral and written.

WHAT WE OFFER

• An offer tailored to your experience. Your compensation package will be defined based on your professional experience, technical expertise and the level of responsibility associated with the position. The collective labour agreement (CCNL) applied within Reply is the Italian Metalworking Industry Agreement. The position is expected to start from the B1 level, with a gross annual salary (RAL) ranging from € 31,000 to € 45,000. Previous experience and skills in frontier technologies will be considered particularly valuable (e.g., Agentic AI, model training & fine-tuning, and adversarial machine learning).
• A structured career path. Our Career Path offers opportunities to grow both as a technical specialist and as a future leader. Your ambitions, the skills you develop, and the results you achieve will shape your professional journey.
• Continuous learning. Technology evolves rapidly - and so do we. You will join an environment that encourages curiosity, continuous learning, and the exploration of new ideas and emerging technologies.
• The benefits of being a Replyer. You will also have access to the benefits dedicated to our Community.

WHAT ARE THE NEXT STEPS

The first step of our recruiting process will be the meetings with the technical referents and then a face‑to‑face interview with the HR team. We care about an equal recruiting process. If you are passionate about offensive security and ethical hacking and eager to work in an innovative environment, we invite you to apply and join our penetration testing team. Feel interested?

WHO WE ARE

Reply is a company that specialises in Consulting, Systems Integration and Digital Services with a focus on the conception, design and implementation of solutions based on the new communication channels and digital media. Reply partners with key industrial groups in defining and developing business models made possible by the new technological and communication paradigms such as Artificial Intelligence, Big Data, Cloud Computing, Digital Communication, the Internet of Things and Mobile and Social Networking. In so doing, it aims to optimise and integrate processes, applications and devices. Reply is committed to embracing diversity and creating an inclusive work environment by valuing the uniqueness of people regardless of age, gender, sexual orientation, religion, nationality or disabilities as protected by Italian Law (L.68/99). Reply is committed to ensuring that our candidate selection methods are fair and just. To help you during the recruitment process, please let us know of any Reasonable Adjustments you may need.

--