Security Analyst - Vulnerability Analyst

ppAs a Vulnerability Analyst and Penetration Tester, you will work closely with the Cyber Security Monitoring team to perform vulnerability assessments, penetration testing, red teaming activities, and security impact analyses related to emerging cyber threats, zero-day vulnerabilities, and advanced attack techniques. /ppThe role also includes leveraging AI-driven cybersecurity solutions and Large Language Models (LLMs) to enhance information gathering, vulnerability analysis, attack surface monitoring, and the identification of indicators of compromise associated with evolving threat actors and attack campaigns. /ph3Activities will include: /h3ulliExecution of periodic Vulnerability Assessments across both internal and external perimeters using enterprise-grade security platforms and automated assessment tools. /liliIdentification, validation, prioritization, and reporting of vulnerabilities to asset owners, with continuous tracking of remediation activities through the organization's Vulnerability Management platform. /liliExecution of Web Application Penetration Tests (WAPT), infrastructure penetration tests, and Red Teaming exercises based on internally defined threat scenarios and intelligence-driven attack simulations. /liliCollection and correlation of information from OSINT, CLOSINT, Threat Intelligence feeds, and AI-assisted research platforms to identify newly disclosed vulnerabilities, emerging threats, and zero-day exposures. /liliSecurity impact assessment of new vulnerabilities and threat campaigns affecting the organization, including risk evaluation, remediation prioritization, and stakeholder communication. /liliUtilization of AI and Machine Learning-based tools to support vulnerability triage, threat hunting, attack pattern analysis, anomaly detection, and proactive identification of emerging cyber risks. /li /ulh3MAIN TASKS /h3ulliPerform Red Teaming activities in collaboration with the GOSP CSIRT team, based on agreed cyber threat scenarios, to validate detection, response, and prevention capabilities, identify security gaps, and define remediation actions. /liliConduct Web Application Penetration Testing (WAPT) and infrastructure penetration testing activities to assess security posture, system hardening, configuration effectiveness, and resilience against real-world attack techniques. /liliExecute periodic Vulnerability Assessments on internal and external infrastructures to identify, validate, and prioritize security vulnerabilities. /liliTrack, monitor, and report identified vulnerabilities through the GOSP Vulnerability Management process, ensuring remediation activities are appropriately managed and verified. /liliAnalyze newly discovered vulnerabilities, CVEs, and zero-day threats collected from OSINT, CLOSINT, commercial threat intelligence sources, and AI-assisted intelligence platforms, assessing their potential impact on GOSP infrastructure and services. /liliLeverage Generative AI and AI-powered cybersecurity solutions to accelerate threat intelligence analysis, vulnerability research, attack path identification, security assessments, and the production of technical reports and remediation recommendations. /liliSupport proactive threat hunting and attack surface monitoring activities by combining traditional security methodologies with AI-enhanced analytics and automation capabilities. /liliContribute to the continuous improvement of security testing methodologies, adversary emulation techniques, and cybersecurity processes aligned with evolving threat landscapes. /li /ulh3Requirements /h3ulliDegree in Computer Science, IT Security, or equivalent work experience in Information Security. /lili2-5 years of experience in vulnerability assessment / penetration tests activities. /liliKnowledge of Vulnerability Assessment, Penetration Testing, Red Teaming, and Vulnerability Management methodologies. /liliFamiliarity with security frameworks and standards such as OWASP, MITRE ATTCK, NIST, and CVSS. /liliKnowledge of the main market tools and processes to perform vulnerability assessments (e.g: Qualys, Nessus, OpenVAS, NMAP, etc). /liliKnowledge on the main penetration testing tools available on the market (e.g: Zap, Burp suite, Metasploit, Wireshark, John The Ripper, SQLmap, etc). /liliUnderstanding of Threat Intelligence, OSINT techniques, and cyber threat analysis. /liliFamiliarity with AI/ML technologies, Security Copilots, LLMs, and AI-assisted cybersecurity platforms applied to threat detection, vulnerability management, and security operations. /liliStrong analytical mindset, problem-solving skills, and ability to communicate technical findings to both technical and non-technical stakeholders. /liliGood knowledge of IT networks and protocols, Operating systems, web and application server architectures. /liliGood knowledge of Microsoft Active Directory architecture and . /liliGood knowledge of one or more programming languages (e.g: python, PowerShell, C/C++, etc) /liliIntermediate English (at least CEFR B1, written/spoken) /liliAvailability of certificates is a plus (e.g., CEH, OSCP, GPEN, etc) /li /ulh3Soft Skills: /h3ulliAbility to work in team and to maintain deadlines on assigned tasks /liliPositive attitude and open to learn on the job /liliPassionate about offensive security /liliProactive in identifying obstacles and problems that might impact your daily activities /liliCapability to perform periodical report to your manager /liliVery good problem-solving capabilities /liliOpen to cooperation with other team within the organization /li /ulpWe offer employment at the V level with the relevant salary, in accordance with the CCNL ANIA for non-executive employees and the Generali Group Company Agreement. /ppGross annual salary ranging between 40K€ and 50K€. The final offer will be aligned with the candidate’s professional experience, technical and soft skills relevant to the role, and may include an individual variable component. /ph3We also offer /h3ulliSmart working and flexible hours /liliCorporate welfare system /liliSupplementary health insurance and discounted insurance policies /liliTraining and development /liliStructured continuous learning paths (technical and managerial) /liliCareer development programs within the Group /liliAccess to learning platforms and internal mobility opportunities, including international /li /ulh3Company Profile /h3pJoining Generali means becoming part of an international Group with a strong heritage and a forward-looking vision, where people are at the center of our sustainable growth strategy. /ppWe foster a responsible, inclusive, and innovation-driven work environment, where everyone can contribute to creating value for customers, society, and the communities in which we operate. We believe that diversity, equity and inclusion are essential to building a stronger culture and driving sustainable growth. /ppAt Generali, you will find opportunities to grow through continuous learning, career development paths, and internal mobility across the Group. We recognize talent and merit, and support flexibility as a key enabler of well-being and a sustainable work-life balance. /ppWorking with us means sharing strong values and taking on meaningful challenges together to build a safer and more sustainable future every day. /ppAs an Equal Opportunity Employer, Generali evaluates all applications based exclusively on objective and gender-neutral criteria, including skills, experience and potential, ensuring fairness and transparency throughout the selection process. /p /p #J-18808-Ljbffr