[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-product-owner-vulnerability-scanning-coba-nearshoring-sofia-bg-de-bg":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":11,"featured_until":7,"is_active":12,"deactivated_at":7,"is_enriched":12,"processed_job_posting_json":13,"processed_latitude":82,"processed_longitude":83,"processed_employment_types":84,"processed_working_hours":85,"processed_working_hours_labels":87,"processed_home_office":88,"processed_salary_min":79,"processed_salary_max":80,"processed_salary_currency":76,"processed_salary_source":89,"processed_benefits":90,"processed_benefits_labels":103,"processed_industry":104,"processed_skills":7,"processed_job_location":105,"processed_full_address_gmaps":107,"processed_street_gmaps":109,"processed_city_gmaps":111,"processed_postal_code_gmaps":112,"processed_country_gmaps":114,"processed_country_iso_code_gmaps":116,"full_description":16,"formatted_description":117,"processed_employment_types_labels":38,"processed_home_office_labels":36,"processed_industry_labels":40,"processed_it_skills":118,"processed_it_skills_labels":121,"processed_soft_skills":122,"processed_soft_skills_labels":123,"processed_job_expertise_skills":124,"processed_job_expertise_skills_labels":125,"processed_language_requirements":126,"processed_total_experience_years":133,"processed_professional_field":134,"processed_professional_field_labels":137,"processed_leadership_role":12,"processed_date_posted":19,"raw_job_url":138,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":104,"canonical_industry_label":40,"max_cpc":139,"actual_cpc":7},71584,"product-owner-vulnerability-scanning-coba-nearshoring-sofia-bg","Product Owner Vulnerability Scanning",null,{"name":9,"slug":10,"logo_url":7},"CoBa Nearshoring Sofia BG","coba-nearshoring-sofia-bg",false,true,{"@context":14,"@type":15,"title":6,"description":16,"hiringOrganization":17,"datePosted":19,"validThrough":20,"jobLocation":21,"jobLocationType":36,"employmentType":37,"industry":39,"skills":41,"baseSalary":74},"https:\u002F\u002Fschema.org\u002F","JobPosting","Wichtiger Hinweis: Bitte aktiviere JavaScript, um diese Seite uneingeschränkt nutzen zu können.\nvorherige Stelle\nnächste Stelle\nYour tasks\nLeading the transformation from traditional Vulnerability Management to a holistic CTEM program. Identifying capability gaps and drive the selection and implementation of new tools to complete the full exposure lifecycle.\nOverseeing the engineering and operation of our core Exposure Management ecosystem, specifically Tenable One and XM Cyber. Ensuring optimal configuration and health.\nEnsuring seamless integration of security scanning within the SDLC and managing cloud-native scanning posture for Google Cloud Platform (GCP) and Microsoft Azure.\nEnsuring that solutions and workflows derived from these requirements adhere to DevSecOps best practices (automation, integration into CI\u002FCD and SDLC, “security by design”).\nCollaborating with Service Management to ensure that requirements are reflected in service definitions, SLAs\u002FOLAs, reporting and KPIs.\nPrioritization & Validation: Moving beyond CVSS scores. Leveraging Attack Path Management (XM Cyber) to validate risks and prioritize remediation based on actual exploitability and business impact.\nProviding technical direction and mentorship to the engineering team. Managing the backlog, ensuring a balance between operational stability and strategic project implementation.\nBridging the gap between security findings and IT operations. Designing automated workflows and clear metrics to ensure valid threats are remediated swiftly.\nEnsuring the expanded CTEM scope satisfies strict banking regulations.\nYour profile\nExperience with Exposure management platforms. Deep understanding of the vulnerability management lifecycle. Hands-on experience with enterprise vulnerability management platforms for network, agent-based, and container scanning. Experience with Web application scanning.\nProven experience with CTEM platforms and attack simulation concepts to identify, visualize, and prioritize critical security gaps.\nUnderstanding of the cloud architecture. Experience and knowledge of cloud security principles. Understanding of CSPM, CNAPP, “Shift-Left Security” approach will be beneficial.\nSolid understanding of DevSecOps concepts (security in CI\u002FCD pipelines and SDLC, automation, quality gates).\nExperience in auditing and scanning systems against industry standard security configuration guidelines, such as CIS benchmark.\nCreate and maintain detailed product roadmap that outlines prioritized features, enhancements and integrations.\nIn return, we offer:\nGood work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours, work-from-home and work from abroad opportunities;\nLuxury package of additional health and dental insurance;\nFood vouchers in the amount of EUR 80 monthly;\n6 additional annual days off for exceptional circumstances\nEmployee assistance program for psychological, financial and legal consultations;\nMultisport card;\nAnnual contribution of EUR 153.39 net per child for a summer camp\u002Fschool\u002Fkindergarten for children up to age of 15;\nPossibilities for building career-advancing skills by covering training\u002Fcertification courses and conferences based on individual learning and development needs, access to an online learning platform;\nOpportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center;\nFriendly and supportive multicultural environment, open to new opinions and ideas.\nCommerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.\nOur Benefits\nWork internationally\nWork-life balance\nHealth& Dental Insurance\nMultisport Card\n25 up to 31 annual paid leave\n6 Exceptional Days Off\nFood vouchers\nEmployee assistance program\nChildren Summer Camp Contribution\nLearning Platforms\nWork internationally; Work-life balance; Health& Dental Insurance; Multisport Card; 25 up to 31 annual paid leave; 6 Exceptional Days Off; Food vouchers; Employee assistance program; Children Summer Camp Contribution; Learning Platforms\nBookmark job ad\nPrint job ad\nShare job ad\nThe company\nCommerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.\nAs part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey and we are looking for a\nProduct Owner\nVulnerability Scanning\nin our\nCyber Defense and Base Services\nteam.\nContact\nApply now with your up-to-date CV in English!\nDue to the high volume of applications, we contact only the candidates who best match the role requirements. If you do not hear from us within 14 days, please consider that we won't proceed with your application at this stage.\nVerwandte Stellen\nBitte warten...\nvorherige Stelle\nnächste Stelle\nZurück\nTeilen über deinen Social Media Account\nKlicke auf eines der Icons:\nTeilen über Mail\nTeilen über Facebook\nTeilen über X\nTeilen über Xing\nTeilen über LinkedIn",{"@type":18,"name":9},"Organization","2026-05-27","2027-05-27",[22,33],{"@type":23,"address":24,"geo":29},"Place",{"@type":25,"addressLocality":26,"addressCountry":27,"addressRegion":28},"PostalAddress","Sofia","BG","Sofia City Province",{"@type":30,"latitude":31,"longitude":32},"GeoCoordinates",42.6303775,23.3766917,{"@type":23,"address":34,"geo":35},{"@type":25,"addressLocality":26,"addressCountry":27,"addressRegion":28},{"@type":30,"latitude":31,"longitude":32},"HYBRID",[38],"PERMANENT",[40],"Banking",[42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,50,68,69,70,71,72,73],"Tenable One","XM Cyber","Google Cloud Platform (GCP)","Microsoft Azure","CI\u002FCD","SDLC","CSPM","CNAPP","DevSecOps","Attack Path Management","Vulnerability Scanning","Container Scanning","Web Application Scanning","Cloud Security","Automation","Leadership","Mentorship","Collaboration","Communication","Prioritization","Strategic Thinking","Vulnerability Management","CTEM","Exposure Management","Attack Simulation","Cloud Architecture","CIS Benchmark","Product Roadmap","Backlog Management","Service Management","Banking Regulations","Security Configuration Guidelines",{"@type":75,"currency":76,"value":77},"MonetaryAmount","EUR",{"@type":78,"minValue":79,"maxValue":80,"unitText":81},"QuantitativeValue",60000,90000,"YEAR",[31,31],[32,32],"permanent",[86],"FULL_TIME",[86],"hybrid","estimated",[91,92,93,94,95,96,97,98,99,100,101,102],"25 days annual paid leave (increasing with 1 day per year up to 31 in total)","Flexible working hours","Work-from-home and work from abroad opportunities","Luxury package of additional health and dental insurance","Food vouchers in the amount of EUR 80 monthly","6 additional annual days off for exceptional circumstances","Employee assistance program for psychological, financial and legal consultations","Multisport card","Annual contribution of EUR 153.39 net per child for a summer camp\u002Fschool\u002Fkindergarten for children up to age of 15","Possibilities for building career-advancing skills by covering training\u002Fcertification courses and conferences based on individual learning and development needs, access to an online learning platform","Opportunities for long-term professional development in a stable, 150-year-old company","Friendly and supportive multicultural environment",[91,92,93,94,95,96,97,98,99,100,101,102],"banking",[106],"samara street, 1706, sofia, bulgarien",[108],"Mladost, ul. \"Samara\", 1715 Sofia, Bulgarien",[110],"ulitsa \"Samara\"",[26],[113],"1715",[115],"Bulgarien",[27],"Wichtiger Hinweis: Bitte aktiviere JavaScript, um diese Seite uneingeschränkt nutzen zu können.\n\nvorherige Stelle\n\nnächste Stelle\n\n## Your tasks\n\n- Leading the transformation from traditional Vulnerability Management to a holistic CTEM program. Identifying capability gaps and drive the selection and implementation of new tools to complete the full exposure lifecycle.\n- Overseeing the engineering and operation of our core Exposure Management ecosystem, specifically Tenable One and XM Cyber. Ensuring optimal configuration and health.\n- Ensuring seamless integration of security scanning within the SDLC and managing cloud-native scanning posture for Google Cloud Platform (GCP) and Microsoft Azure.\n- Ensuring that solutions and workflows derived from these requirements adhere to DevSecOps best practices (automation, integration into CI\u002FCD and SDLC, “security by design”).\n- Collaborating with Service Management to ensure that requirements are reflected in service definitions, SLAs\u002FOLAs, reporting and KPIs.\n- Prioritization & Validation: Moving beyond CVSS scores. Leveraging Attack Path Management (XM Cyber) to validate risks and prioritize remediation based on actual exploitability and business impact.\n- Providing technical direction and mentorship to the engineering team. Managing the backlog, ensuring a balance between operational stability and strategic project implementation.\n- Bridging the gap between security findings and IT operations. Designing automated workflows and clear metrics to ensure valid threats are remediated swiftly.\n- Ensuring the expanded CTEM scope satisfies strict banking regulations.\n\n## Your profile\n\n- Experience with Exposure management platforms. Deep understanding of the vulnerability management lifecycle. Hands-on experience with enterprise vulnerability management platforms for network, agent-based, and container scanning. Experience with Web application scanning.\n- Proven experience with CTEM platforms and attack simulation concepts to identify, visualize, and prioritize critical security gaps.\n- Understanding of the cloud architecture. Experience and knowledge of cloud security principles. Understanding of CSPM, CNAPP, “Shift-Left Security” approach will be beneficial.\n- Solid understanding of DevSecOps concepts (security in CI\u002FCD pipelines and SDLC, automation, quality gates).\n- Experience in auditing and scanning systems against industry standard security configuration guidelines, such as CIS benchmark.\n- Create and maintain detailed product roadmap that outlines prioritized features, enhancements and integrations.\n\nIn return, we offer:\n\n- Good work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours, work-from-home and work from abroad opportunities;\n- Luxury package of additional health and dental insurance;\n- Food vouchers in the amount of EUR 80 monthly;\n- 6 additional annual days off for exceptional circumstances\n- Employee assistance program for psychological, financial and legal consultations;\n- Multisport card;\n- Annual contribution of EUR 153.39 net per child for a summer camp\u002Fschool\u002Fkindergarten for children up to age of 15;\n- Possibilities for building career-advancing skills by covering training\u002Fcertification courses and conferences based on individual learning and development needs, access to an online learning platform;\n- Opportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center;\n- Friendly and supportive multicultural environment, open to new opinions and ideas.\n\nCommerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.\n\n## Our Benefits\n\n- Work internationally\n- Work-life balance\n- Health& Dental Insurance\n- Multisport Card\n- 25 up to 31 annual paid leave\n- 6 Exceptional Days Off\n- Food vouchers\n- Employee assistance program\n- Children Summer Camp Contribution\n- Learning Platforms\n\nWork internationally; Work-life balance; Health& Dental Insurance; Multisport Card; 25 up to 31 annual paid leave; 6 Exceptional Days Off; Food vouchers; Employee assistance program; Children Summer Camp Contribution; Learning Platforms\n\nBookmark job ad\n\nPrint job ad\n\nShare job ad\n\n## The company\n\nCommerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.\n\nAs part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey and we are looking for a\n\nProduct Owner\n\nVulnerability Scanning\n\nin our\n\nCyber Defense and Base Services\n\nteam.\n\n## Contact\n\nApply now with your up-to-date CV in English!\n\nDue to the high volume of applications, we contact only the candidates who best match the role requirements. If you do not hear from us within 14 days, please consider that we won't proceed with your application at this stage.\n\n## Verwandte Stellen\n\nBitte warten...\n\nvorherige Stelle\n\nnächste Stelle\n\nZurück\n\nTeilen über deinen Social Media Account\n\nKlicke auf eines der Icons:\n\nTeilen über Mail\n\nTeilen über Facebook\n\nTeilen über X\n\nTeilen über Xing\n\nTeilen über LinkedIn",{"cspm":119,"sdlc":119,"ci\u002Fcd":119,"cnapp":119,"xm cyber":120,"devsecops":119,"automation":119,"tenable one":120,"cloud security":119,"microsoft azure":119,"container scanning":119,"attack path management":120,"vulnerability scanning":120,"web application scanning":119,"google cloud platform (gcp)":119},3,4,[42,43,44,45,46,47,48,49,50,51,52,53,54,55,56],{"leadership":120,"mentorship":119,"collaboration":120,"communication":120,"prioritization":120,"strategic thinking":119},[57,58,59,60,61,62],{"ctem":120,"devsecops":119,"cis benchmark":119,"product roadmap":120,"attack simulation":119,"backlog management":120,"cloud architecture":119,"service management":119,"banking regulations":119,"exposure management":120,"vulnerability management":120,"security configuration guidelines":119},[63,64,65,66,67,50,68,69,70,71,72,73],{"detected_language_jobad":127,"required":128},"en",[129],[130],{"language":131,"level":132},"ENGLISH","C1",5,[135,136],"Information and Communications Technology Service Managers","Security and Protective Services",[135,136],"https:\u002F\u002Fcoba-beesite-production-frontend.app.beesite.de\u002Findex.php?ac=jobad&id=59252",1]