OFFENSIVE SECURITY SPECIALIST

Reply, Inc.; Lombardia; Remote; EUR 31,000 - 45,000; Full time

Benefits offered by this job

Career path

Continuous learning

Replyer benefits

Job summary

Reply, Inc. is seeking an Offensive Security Specialist to assess and exploit vulnerabilities in applications, embedded products, networks, and AI-based systems.

You will work with a forward-thinking team, focusing on advanced security testing beyond automated tools. Requirements include a Bachelor's or Master's in IT/Info Security/CS, strong Python and C skills, and familiarity with OWASP and AI/ML security.

Qualifications

• Bachelor's or Master's in IT/Info Security/CS required.
• Scripting and programming skills (Python, C) and OS knowledge.
• Familiarity with OWASP and networking concepts; web app pentesting experience.

Responsibilities

• Perform penetration tests on networks, web/mobile apps, and embedded/IoT/AI systems.
• Engage with clients to scope, plan, present findings and advise on countermeasures.
• Go beyond automated VA/PT tools and apply AI-enabled testing and tooling.
• Write clear security assessment reports for IT teams.

Skills

Python

C

Operating systems knowledge

Security testing

Education

Bachelor's or Master's Degree in IT/Information Security/Computer Science

Tools

OWASP

Job description

Do you have a passion for offensive security and ethical hacking? Join our team and help evaluate and strengthen the security posture of leading organizations. As an Offensive Security Specialist, you will assess and exploit vulnerabilities in applications, embedded products, network infrastructures and AI-based systems, starting exactly where ordinary vulnerability assessments end.

We are Reply , and we are looking for you!

WHAT WILL YOU DO?

Join our forward-thinking team as an Offensive Security Specialist. In this hands-on role, you will focus on evaluating the security posture of our customers by assessing and exploiting vulnerabilities in their applications, embedded products and network infrastructures, working closely with a team that thrives on solving new and unforeseen problems.

• Core activities. Perform penetration tests on network infrastructures, web and mobile applications and embedded/IoT products and AI-based applications, including security audits, code reviews, Red/Purple Team engagements and AI Red Teaming to test the security posture of AI-based applications and models.
• Client engagement . Work hand in hand with our customers, scoping and planning security activities, presenting and discussing your findings, and advising on practical countermeasures that measurably strengthen their security posture.
• Approach & tools. Go beyond running automated VA/PT tools. You will start where ordinary vulnerability assessments end, applying an out-of-the-box mindset to secure large network infrastructures, web portals, mobile applications and embedded/IoT products using exciting and future technologies. You will also harness AI to automate and scale security testing, building scripts and tooling that speed up reconnaissance, vulnerability discovery and exploitation, and applying AI/ML to triage findings, reduce false positives and surface the issues that matter most.
• Team work. Write clear security assessment reports and communicate results effectively to customers' IT teams, collaborating with a very forward-thinking team on challenging engagements.

WHAT WE ARE LOOKING FOR

• Academic background. A Bachelor's or Master's Degree in Information Technology, Information Security or Computer Science.
• Valuable expertise. Scripting and programming skills (e.g., Python, C) and a deep knowledge of the main operating systems (e.g., Windows, Linux/Unix, Android, iOS, macOS).
• Technical skills. Knowledge of OWASP and of networking concepts (e.g., protocols, routing), together with hands-on experience in web application penetration testing. Familiarity with the security of AI/ML systems and Large Language Models (e.g., the OWASP Top 10 for LLM Applications, prompt injection, model evasion) is a strong plus.
• Certifications. Training and certification courses in network security and Ethical Hacking, participation in “Capture The Flag” (CTF) competitions, and research work experience or published CVEs are a definite plus.
• Soft skills. Good presentation and communication skills, with an aptitude for teamwork and flexibility, and a genuine enthusiasm for tackling new and unforeseen problems.
• Passion & curiosity . We are looking for passionate people, eager to explore new challenges, including reinventing security testing through AI and GenAI technologies.
• Languages. Native proficiency in Italian and fluent English, both oral and written.

WHAT WE OFFER

• An offer tailored to your experience. Your compensation package will be defined based on your professional experience, technicalexpertiseandthe level of responsibility associated with theposition.The collectivelabouragreement (CCNL) appliedwithin Reply is the Italian Metalworking Industry Agreement. The position is expected to startfromtheB1level, with a gross annual salary (RAL) ranging from€ 31,000to€ 45,000. Previous experience and skills in frontier technologies will be considered particularly valuable (e.g., Agentic AI, model training & fine-tuning, and adversarial machine learning).
• A structured career path .Our Career Path offers opportunities to grow both as a technical specialist and as a future leader. Your ambitions, the skills you develop, and the results you achieve will shape your professional journey.
• Continuous learning .Technology evolves rapidly - and so do we. You will join an environment that encourages curiosity, continuous learning, and the exploration ofnew ideasand emerging technologies.
• The benefits of being aReplyer .You will also have access to the benefits dedicated to our Community.

WHAT ARE THE NEXT STEPS

The first step of our recruiting process will be the meetings with the technical referents and then a face-to-face interview with the HR team. We care about an equal recruiting process.

WHO WE ARE

Reply is a company that specialises in Consulting, Systems Integration and Digital Services with a focus on the conception, design and implementation of solutions based on the new communication channels and digital media. Reply partners with key industrial groups in defining and developing business models made possible by the new technological and communication paradigms such as Artificial Intelligence, Big Data, Cloud Computing, Digital Communication, the Internet of Things and Mobile and Social Networking. In so doing, it aims to optimise and integrate processes, applications and devices.

Reply is committed to embracing diversity and creating an inclusive work environment by valuing the uniqueness of people regardless of age, gender, sexual orientation, religion, nationality or disabilities as protected by Italian Law (L.68/99).

Reply is committed to ensuring that our candidate selection methods are fair and just. To help you during the recruitment process, please let us know of any Reasonable Adjustments you may need.