{"id":2151323,"url":"https://alion.io/job/generali-security-analyst-vulnerability-analyst","title":"Security Analyst - Vulnerability Analyst","company":{"id":1773319,"name":"Generali","domain":"generali.com","url":"https://alion.io/company/generali-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Go Generali","truth_index":{"grade":"C","score":68,"open_postings":184,"ghost_share":0.533,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rome, Italy"],"countries":["IT"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":40000,"max":50000,"currency":"EUR","period":"year","gross":true,"usd_annual":55997},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"Burp Suite","optional":false},{"name":"C++","optional":false},{"name":"CVSS","optional":false},{"name":"John the Ripper","optional":false},{"name":"Machine Learning","optional":false},{"name":"Metasploit","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"OpenVAS","optional":false},{"name":"OWASP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Red Teaming","optional":false},{"name":"SQLmap","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-09-08T14:09:45Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-13T11:01:10Z","board_verified":true,"closed_at":null,"days_open":35,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":34},"description":"As a Vulnerability Analyst and Penetration Tester, you will work closely with the Cyber Security Monitoring team to perform vulnerability assessments, penetration testing, red teaming activities, and security impact analyses related to emerging cyber threats, zero-day vulnerabilities, and advanced attack techniques.\nThe role also includes leveraging AI-driven cybersecurity solutions and Large Language Models (LLMs) to enhance information gathering, vulnerability analysis, attack surface monitoring, and the identification of indicators of compromise associated with evolving threat actors and attack campaigns.\nActivities will include:\nExecution of periodic Vulnerability Assessments across both internal and external perimeters using enterprise-grade security platforms and automated assessment tools.\nIdentification, validation, prioritization, and reporting of vulnerabilities to asset owners, with continuous tracking of remediation activities through the organization's Vulnerability Management platform.\nExecution of Web Application Penetration Tests (WAPT), infrastructure penetration tests, and Red Teaming exercises based on internally defined threat scenarios and intelligence-driven attack simulations.\nCollection and correlation of information from OSINT, CLOSINT, Threat Intelligence feeds, and AI-assisted research platforms to identify newly disclosed vulnerabilities, emerging threats, and zero-day exposures.\nSecurity impact assessment of new vulnerabilities and threat campaigns affecting the organization, including risk evaluation, remediation prioritization, and stakeholder communication.\nUtilization of AI and Machine Learning-based tools to support vulnerability triage, threat hunting, attack pattern analysis, anomaly detection, and proactive identification of emerging cyber risks.\nMAIN TASKS\nPerform Red Teaming activities in collaboration with the GOSP CSIRT team, based on agreed cyber threat scenarios, to validate detection, response, and prevention capabilities, identify security gaps, and define remediation actions.\nConduct Web Application Penetration Testing (WAPT) and infrastructure penetration testing activities to assess security posture, system hardening, configuration effectiveness, and resilience against real-world attack techniques.\nExecute periodic Vulnerability Assessments on internal and external infrastructures to identify, validate, and prioritize security vulnerabilities.\nTrack, monitor, and report identified vulnerabilities through the GOSP Vulnerability Management process, ensuring remediation activities are appropriately managed and verified.\nAnalyze newly discovered vulnerabilities, CVEs, and zero-day threats collected from OSINT, CLOSINT, commercial threat intelligence sources, and AI-assisted intelligence platforms, assessing their potential impact on GOSP infrastructure and services.\nLeverage Generative AI and AI-powered cybersecurity solutions to accelerate threat intelligence analysis, vulnerability research, attack path identification, security assessments, and the production of technical reports and remediation recommendations.\nSupport proactive threat hunting and attack surface monitoring activities by combining traditional security methodologies with AI-enhanced analytics and automation capabilities.\nContribute to the continuous improvement of security testing methodologies, adversary emulation techniques, and cybersecurity processes aligned with evolving threat landscapes.\nDegree in Computer Science, IT Security, or equivalent work experience in Information Security.\n2-5 years of experience in vulnerability assessment / penetration tests activities.\nKnowledge of Vulnerability Assessment, Penetration Testing, Red Teaming, and Vulnerability Management methodologies.\nFamiliarity with security frameworks and standards such as OWASP, MITRE ATT&CK, NIST, and CVSS.\nKnowledge of the main market tools and processes to perform vulnerability assessments (e.g: Qualys, Nessus, OpenVAS, NMAP, etc).\nKnowledge on the main penetration testing tools available on the market (e.g: Zap, Burp suite, Metasploit, Wireshark, John The Ripper, SQLmap, etc).\nUnderstanding of Threat Intelligence, OSINT techniques, and cyber threat analysis.\nFamiliarity with AI/ML technologies, Security Copilots, LLMs, and AI-assisted cybersecurity platforms applied to threat detection, vulnerability management, and security operations.\nStrong analytical mindset, problem-solving skills, and ability to communicate technical findings to both technical and non-technical stakeholders.\nGood knowledge of IT networks and protocols, Operating systems, web and application server architectures.\nGood knowledge of Microsoft Active Directory architecture and .\nGood knowledge of one or more programming languages (e.g: python, PowerShell, C/C++, etc) \nIntermediate English (at least CEFR B1, written/spoken)\nAvailability of certifications is a plus (e.g., CEH, OSCP, GPEN, etc)\nSoft Skills:\nAbility to work in team and to maintain deadlines on assigned tasks\nPositive attitude and open to learn on the job\nPassionate about offensive security\nProactive in identifying obstacles and problems that might impact your daily activities\nCapability to perform periodical report to your manager\nVery good problem-solving capabilities\nOpen to cooperation with other team within the organization\nWhat we offer\nWe offer employment at the V level with the relevant salary, in accordance with the CCNL ANIA for non-executive employees and the Generali Group Company Agreement.\nGross annual salary ranging between 40K€ and 50K€. The final offer will be aligned with the candidate’s professional experience, technical and soft skills relevant to the role, and may include an individual variable component.\nWe also offer\nSmart working and flexible hours\nCorporate welfare system\nMeal vouchers\nSupplementary health insurance and discounted insurance policies\nWell-being initiatives\nTraining and development\nStructured continuous learning paths (technical and managerial)\nCareer development programs within the Group\nAccess to learning platforms and internal mobility opportunities, including international\nWhy Join Generali\nJoining Generali means becoming part of an international Group with a strong heritage and a forward-looking vision, where people are at the center of our sustainable growth strategy.\nWe foster a responsible, inclusive, and innovation-driven work environment, where everyone can contribute to creating value for customers, society, and the communities in which we operate. We believe that diversity, equity and inclusion are essential to building a stronger culture and driving sustainable growth.\nAt Generali, you will find opportunities to grow through continuous learning, career development paths, and internal mobility across the Group. We recognize talent and merit, and support flexibility as a key enabler of well-being and a sustainable work-life balance.\nWorking with us means sharing strong values and taking on meaningful challenges together to build a safer and more sustainable future every day.\nAs an Equal Opportunity Employer, Generali evaluates all applications based exclusively on objective and gender-neutral criteria, including skills, experience and potential, ensuring fairness and transparency throughout the selection process.\nGenerali Operations Service Platform S.r.l","description_format":"text","description_chars":7361,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"Intermediate (B1)","optional":false}]},"benefits":["Continuous learning","Equity","Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Spa & Massage"],"lifecycle":[{"event":"open","at":"2026-10-09T05:51:20Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.321,"p_room":0.28,"age_days":34,"expected_fill_days":13,"reasons":["conf:1","stale_co","win:tail","crowd:junior,brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":{"stated_usd_annual":55997,"is_top_pay":false},"html_url":"https://alion.io/job/generali-security-analyst-vulnerability-analyst","json_url":"https://alion.io/job/generali-security-analyst-vulnerability-analyst.json","meta":{"generated_at":"2026-10-13T14:41:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22543,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1773319},"rest":"https://alion.io/mcp/rest/get_company?id=1773319"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgenerali-security-analyst-vulnerability-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgenerali-security-analyst-vulnerability-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgenerali-security-analyst-vulnerability-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/generali-security-analyst-vulnerability-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgenerali-security-analyst-vulnerability-analyst"}]}