Vulnerability Management Specialist

Reply; Plasencia; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Structured career path

Continuous learning

Competitive compensation

Growth opportunities

Equal opportunity employer

Reply network benefits

Job summary

Reply is seeking a Vulnerability Management Specialist to own the full lifecycle across networks, apps, cloud, and AI systems, collaborating with customers to design risk-based programs using AI-driven analytics to reduce exposure.

You will build tooling, tune processes, and guide remediation, blending hands-on work with client engagement in a forward-thinking team to advance security through AI-enabled, scalable vulnerability management.

Qualifications

• Bachelor or Master in Information Technology, Information Security or Computer Science.
• Scripting and automation skills (e.g., Python).
• Knowledge of Windows, Linux/Unix and cloud environments.
• Familiarity with vulnerability scanning and IT asset management tools.
• Knowledge of OWASP and networking concepts; hands-on vulnerability assessment and CVSS/risk-based prioritization.
• Familiarity with security of AI/ML systems and LLM risk considerations; OWASP Top 10 for LLM Applications is a plus.
• Certifications in network security or vulnerability management (e.g., CompTIA Security+, eJPT, CEH) a plus.
• Experience with CVSS scoring and risk-based prioritization methodologies.
• Strong communication and presentation abilities.
• Italian native and fluent English.
• Interest in AI and GenAI security themes.

Responsibilities

• Design and run end-to-end vulnerability management programs across networks, applications, cloud, and AI systems.
• Perform scanning, risk scoring, remediation follow-up, and reporting.
• Assess AI-based applications and models to map exposure.
• Engage with clients to scope activities, present findings, and guide remediation.
• Design and refine vulnerability management processes with a risk-based mindset.
• Develop scripts and tooling to speed detection, correlation, and prioritization.
• Apply AI/ML models to triage vulnerabilities and reduce false positives.
• Produce clear, actionable reports for IT teams and collaborate on challenging engagements.

Skills

Python

Vulnerability scanning

CVSS/risk-based prioritization

Windows administration

Linux/Unix administration

Cloud environments

OWASP knowledge

Communication skills

Client engagement

AI/ML security awareness

Education

Bachelor or Master in IT/InfoSec/CS

Tools

Vulnerability scanners

IT asset management tools

Job description

As a Vulnerability Management Specialist at Reply, you own the full vulnerability lifecycle across networks, apps, cloud, and AI systems. You will collaborate with customers to design and run risk-based programs, leveraging AI-driven analytics to reduce exposure. You’ll build tooling, tune processes, and guide remediation to reduce risk. This role combines hands-on technical work with client engagement in a forward-thinking team. You’ll join a mission to advance security through AI-enabled, scalable vulnerability management.

• Structured career path
• Continuous learning environment
• Competitive compensation
• Opportunities for growth into technical specialist or leadership
• Equal opportunity employer
• Industry-wide benefits of being a Replyer
• Design and run end-to-end vulnerability management programs across networks, applications, cloud, and AI systems
• Perform scanning, risk scoring, remediation follow-up, and reporting
• Assess AI-based applications and models to map exposure
• Engage with clients to scope activities, present findings, and guide remediation
• Design and refine vulnerability management processes with a risk-based mindset
• Develop scripts and tooling to speed detection, correlation, and prioritization
• Apply AI/ML models to triage vulnerabilities and reduce false positives
• Produce clear, actionable reports for IT teams and collaborate on challenging engagements
• Bachelor or Master in Information Technology, Information Security or Computer Science
• Scripting and automation skills (e.g., Python)
• Knowledge of Windows, Linux/Unix and cloud environments
• Familiarity with vulnerability scanning and IT asset management tools
• Knowledge of OWASP and networking concepts; hands-on vulnerability assessment and CVSS/risk-based prioritization
• Familiarity with security of AI/ML systems and LLM risk considerations; OWASP Top 10 for LLM Applications is a plus
• Certifications in network security or vulnerability management (e.g., CompTIA Security+, eJPT, CEH) a plus
• Experience with CVSS scoring and risk-based prioritization methodologies
• Strong communication and presentation abilities
• Italian native and fluent English
• Interest in AI and GenAI security themes
• Strong communication and presentation abilities
• Collaborative and flexible attitude
• Curiosity and enthusiasm for solving new problems
• Python scripting and automation
• Windows and Linux/Unix administration
• Cloud environments (e.g., public cloud)