L

Leonardo

Aerospace, defense tech design and manufacturing

Vulnerability Management Specialist

Offensive Security & TestingConfirmed live in the last 24 hours
Full-time

About the Job

Requirements

  • A degree or equivalent background is required.
  • At least 2 years of experience in red teaming or penetration testing is required.
  • Advanced knowledge of vulnerability assessment methodologies and supporting tools is required.
  • Good knowledge of major programming languages is required.
  • Good knowledge of secure-coding best practices is required.
  • Good knowledge of guidelines, tools, and methodologies for improving application security is required.
  • Good knowledge of cybersecurity directives and standards, including NIS2, is required.
  • Advanced knowledge of penetration-testing methodologies and tools across infrastructure, web applications, mobile, Wi-Fi, large language models, Active Directory, cloud, hardware, firmware, radio frequency/software-defined radio, and NFC is required.
  • Good knowledge of hardware and software reverse-engineering tools and techniques is required.
  • Good knowledge of hardware and software tools supporting red-team services is required.
  • Good knowledge of radio-frequency analysis tools, techniques, and attack techniques is required.
  • Good knowledge of artificial-intelligence tools, analysis techniques, and attack techniques is required.
  • Good knowledge of firmware analysis tools, techniques, and vulnerability analysis is required.
  • Good knowledge of NFC tools, analysis techniques, and analysis methods is required.
  • Good knowledge of applicable regulations for testing target compliance is required.
  • Good knowledge of purple-teaming tools and techniques is required.
  • Good knowledge of discovery techniques is required.
  • Good knowledge of hardening techniques and related standards is required.
  • Good knowledge of blue-team practices and cyber threat intelligence is required.
  • Good knowledge of the tactics, techniques, and procedures used by major threat actors is required.
  • Good knowledge of scripting to automate product integration through application programming interfaces is required.
  • In-depth knowledge of Linux and Windows operating systems for security administration is required.
  • Excellent knowledge of red-team tools for people, process, and technology activities is required.
  • Good knowledge of blue-team tools is required.
  • English-language proficiency at least at B1 level is required.
  • Availability for short-term domestic and international travel is required.

Responsibilities

  • Deliver on-site or remote vulnerability-assessment services at client locations or remotely.
  • Deliver static application security testing and prepare code-review reports.
  • Deliver dynamic application security testing at client locations or remotely.
  • Deliver penetration tests and security tests in infrastructure, web application, mobile, Wi-Fi, large language model, Active Directory, cloud, hardware, firmware, radio-frequency/software-defined radio, and NFC areas.
  • Deliver red-teaming services across people, process, and technology.
  • Perform discovery to identify assets and services or software within the scope.
  • Support hardening by conducting specific scans and directing remediation actions.
  • Conduct security tests in artificial intelligence.
  • Deliver services involving hardware and software reverse engineering.
  • Analyze hardware components in a laboratory to identify vulnerabilities or weaknesses.
  • Perform security analysis and testing on firmware.
  • Conduct tests of product functionality.
  • Conduct radio-frequency security analysis and testing.
  • Conduct NFC security analysis and testing.
  • Design and conduct red-team versus blue-team exercises.
  • Define and conduct tests to verify a target’s compliance with applicable regulations.
  • Support the development of new services.
  • Develop attack scenarios compatible with major red-team methodologies.
  • Conduct purple-team activities in collaboration with the blue team.
  • Prepare comprehensive reports documenting evidence gathered for all delivered services.
  • Present collected evidence to clients.
  • Help clients understand the information and direct their attention to the most critical evidence.
  • Automate and integrate standard processes.

Desired Qualifications

  • Relevant industry certifications are preferred, including OSCP, OSWA, CEH, CompTIA, GEVA, GPEN, GMOB, GWAPT, GXPN, GCPN, or GAWN.

About the Company

Leonardo

Aerospace, defense tech design and manufacturing

Leonardo operates in aerospace, defense, and security, designing and manufacturing advanced technologies for militaries, intelligence agencies, and defense contractors. Its products combine hardware, software, and services and are delivered through subsidiaries in the US (DRS, Electronics US, Critical Infrastructure, Aircraft and Aerostructures US). It differentiates itself with a broad, diversified portfolio and end-to-end support from development to sustainment, plus training and customer service. Its goal is to provide reliable, state-of-the-art capabilities to defense, intelligence, and civil infrastructure customers while maintaining strong support and training.

Company size
10,001+
Company stage
IPO
Headquarters
Rome, Italy
Founded
2022

Recently Posted Jobs

Explore more opportunities at Leonardo

See more jobs