Vulnerability Management Specialist

Reply; Siena; On-site; EUR 55,000 - 85,000; Full time

Benefits offered by this job

Structured career path

Continuous learning environment

Competitive compensation

Growth opportunities into technical or

leadership

Equal opportunity employer

Job summary

Reply is seeking a Vulnerability Management Specialist to own the full vulnerability lifecycle across networks, apps, cloud, and AI systems. You will design and run risk-based programs, perform scanning and remediation, and produce actionable reports for client IT teams.

The role combines hands-on technical work with client engagement, leveraging AI-driven analytics to reduce exposure and improve processes. Italian and English fluency is expected.

Qualifications

• Bachelor or Master in Information Technology, Information Security or Computer Science.
• Scripting and automation skills (e.g., Python).
• Knowledge of Windows, Linux/Unix and cloud environments.
• Familiarity with vulnerability scanning and IT asset management tools.
• OWASP Top 10 for LLM Applications is a plus.
• Certifications in network security or vulnerability management are a plus.
• Experience with CVSS scoring and risk-based prioritization methodologies.

Responsibilities

• Design and run end-to-end vulnerability management programs across networks, applications, cloud, and AI systems.
• Perform scanning, risk scoring, remediation follow-up, and reporting.
• Assess AI-based applications and models to map exposure.
• Engage with clients to scope activities, present findings, and guide remediation.
• Design and refine vulnerability management processes with a risk-based mindset.
• Develop scripts and tooling to speed detection, correlation, and prioritization.
• Apply AI/ML models to triage vulnerabilities and reduce false positives.
• Produce clear, actionable reports for IT teams and collaborate on challenging engagements.

Skills

Python scripting

Risk-based prioritization

Technical communication

Vulnerability management

IT asset management

OWASP Top 10

Windows administration

Linux/Unix administration

AI/GenAI security

Education

Bachelor or Master in Information Technology, Information Security or Computer Science

Tools

Vulnerability scanning tools

Job description

As a Vulnerability Management Specialist at Reply, you own the full vulnerability lifecycle across networks, apps, cloud, and AI systems. You will collaborate with customers to design and run risk-based programs, leveraging AI-driven analytics to reduce exposure. You’ll build tooling, tune processes, and guide remediation to reduce risk. This role combines hands‑on technical work with client engagement in a forward‑thinking team. You’ll join a mission to advance security through AI‑enabled, scalable vulnerability management.

• Structured career path
• Continuous learning environment
• Competitive compensation
• Opportunities for growth into technical specialist or leadership
• Equal opportunity employer
• Industry‑wide benefits of being a Replyer
• Design and run end‑to‑end vulnerability management programs across networks, applications, cloud, and AI systems
• Perform scanning, risk scoring, remediation follow‑up, and reporting
• Assess AI‑based applications and models to map exposure
• Engage with clients to scope activities, present findings, and guide remediation
• Design and refine vulnerability management processes with a risk‑based mindset
• Develop scripts and tooling to speed detection, correlation, and prioritization
• Apply AI/ML models to triage vulnerabilities and reduce false positives
• Produce clear, actionable reports for IT teams and collaborate on challenging engagements
• Bachelor or Master in Information Technology, Information Security or Computer Science
• Scripting and automation skills (e.g., Python)
• Knowledge of Windows, Linux/Unix and cloud environments
• Familiarity with vulnerability scanning and IT asset management tools
• Knowledge of OWASP and networking concepts; hands‑on vulnerability assessment and CVSS/risk‑based prioritization
• Familiarity with security of AI/ML systems and LLM risk considerations; OWASP Top 10 for LLM Applications is a plus
• Certifications in network security or vulnerability management (e.g., CompTIA Security+, eJPT, CEH) a plus
• Experience with CVSS scoring and risk‑based prioritization methodologies
• Strong communication and presentation abilities
• Italian native and fluent English
• Interest in AI and GenAI security themes
• Strong communication and presentation abilities
• Collaborative and flexible attitude
• Curiosity and enthusiasm for solving new problems
• Python scripting and automation
• Windows and Linux/Unix administration
• Cloud environments (e.g., public cloud)

Vulnerability Management Specialist siena, toscana, it