Vulnerability Management Specialist

Reply; Lodi; On-site; EUR 45,000 - 65,000; Full time

Benefits offered by this job

Structured career path

Continuous learning environment

Competitive compensation

Growth opportunities

Equal opportunity employer

Job summary

Reply is seeking a Vulnerability Management Specialist in Lombardy, Italy to own the full vulnerability lifecycle across networks, applications, cloud, and AI systems. You will design and run risk-based programs for clients, leveraging AI-driven analytics to reduce exposure.

This hands-on role combines technical work with client engagement, developing scripts and tooling to speed detection and prioritization, and guiding remediation with a risk-based mindset.

Qualifications

• Bachelor/Master in IT, information security or CS required.
• Experience with vulnerability management and risk scoring.
• Familiarity with CVSS and remediation workflows.

Responsibilities

• Design and run end-to-end vulnerability management across networks, apps, cloud and AI systems.
• Perform scanning, risk scoring, remediation follow-up, and reporting.
• Assess AI-based apps and models to map exposure.
• Engage with clients to scope activities, present findings, and guide remediation.
• Develop scripts and tooling to speed detection, correlation, and prioritization.
• Apply AI/ML models to triage vulnerabilities and reduce false positives.
• Produce clear, actionable reports for IT teams and teams on engagements.

Skills

Python scripting

Windows

Linux/Unix

Cloud environments

CVSS/risk-based prioritization

Strong communication

AI/ML security concepts

Education

Bachelor or Master in Information Technology, Information Security or Computer Science

Tools

Vulnerability scanning tools

IT asset management tools

Job description

As a Vulnerability Management Specialist at Reply, you own the full vulnerability lifecycle across networks, apps, cloud, and AI systems. You will collaborate with customers to design and run risk-based programs, leveraging AI-driven analytics to reduce exposure. You’ll build tooling, tune processes, and guide remediation to reduce risk. This role combines hands-on technical work with client engagement in a forward-thinking team. You’ll join a mission to advance security through AI-enabled, scalable vulnerability management.

• Structured career path
• Continuous learning environment
• Competitive compensation
• Opportunities for growth into technical specialist or leadership
• Equal opportunity employer
• Industry-wide benefits of being a Replyer
• Design and run end-to-end vulnerability management programs across networks, applications, cloud, and AI systems
• Perform scanning, risk scoring, remediation follow-up, and reporting
• Assess AI-based applications and models to map exposure
• Engage with clients to scope activities, present findings, and guide remediation
• Design and refine vulnerability management processes with a risk-based mindset
• Develop scripts and tooling to speed detection, correlation, and prioritization
• Apply AI/ML models to triage vulnerabilities and reduce false positives
• Produce clear, actionable reports for IT teams and collaborate on challenging engagements
• Bachelor or Master in Information Technology, Information Security or Computer Science
• Scripting and automation skills (e.g., Python)
• Knowledge of Windows, Linux/Unix and cloud environments
• Familiarity with vulnerability scanning and IT asset management tools
• Knowledge of OWASP and networking concepts; hands-on vulnerability assessment and CVSS/risk-based prioritization
• Familiarity with security of AI/ML systems and LLM risk considerations; OWASP Top 10 for LLM Applications is a plus
• Certifications in network security or vulnerability management (e.g., CompTIA Security+, eJPT, CEH) a plus
• Experience with CVSS scoring and risk-based prioritization methodologies
• Strong communication and presentation abilities
• Italian native and fluent English
• Interest in AI and GenAI security themes
• Strong communication and presentation abilities
• Collaborative and flexible attitude
• Curiosity and enthusiasm for solving new problems
• Python scripting and automation
• Windows and Linux/Unix administration
• Cloud environments (e.g., public cloud)

Vulnerability Management Specialist • lodi, lombardia, it