[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-senior-security-automation-integration-engineer-coba-nearshoring-sofia-bg-de-bg":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":11,"featured_until":7,"is_active":12,"deactivated_at":7,"is_enriched":12,"processed_job_posting_json":13,"processed_latitude":104,"processed_longitude":105,"processed_employment_types":106,"processed_working_hours":107,"processed_working_hours_labels":109,"processed_home_office":110,"processed_salary_min":101,"processed_salary_max":102,"processed_salary_currency":98,"processed_salary_source":111,"processed_benefits":112,"processed_benefits_labels":125,"processed_industry":126,"processed_skills":7,"processed_job_location":127,"processed_full_address_gmaps":129,"processed_street_gmaps":131,"processed_city_gmaps":133,"processed_postal_code_gmaps":134,"processed_country_gmaps":136,"processed_country_iso_code_gmaps":138,"full_description":16,"formatted_description":139,"processed_employment_types_labels":38,"processed_home_office_labels":36,"processed_industry_labels":40,"processed_it_skills":140,"processed_it_skills_labels":144,"processed_soft_skills":145,"processed_soft_skills_labels":146,"processed_job_expertise_skills":147,"processed_job_expertise_skills_labels":148,"processed_language_requirements":149,"processed_total_experience_years":156,"processed_professional_field":157,"processed_professional_field_labels":160,"processed_leadership_role":11,"processed_date_posted":19,"raw_job_url":161,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":162,"canonical_industry_label":163,"max_cpc":164,"actual_cpc":7},73912,"senior-security-automation-integration-engineer-coba-nearshoring-sofia-bg","Senior Security Automation & Integration Engineer",null,{"name":9,"slug":10,"logo_url":7},"CoBa Nearshoring Sofia BG","coba-nearshoring-sofia-bg",false,true,{"@context":14,"@type":15,"title":6,"description":16,"hiringOrganization":17,"datePosted":19,"validThrough":20,"jobLocation":21,"jobLocationType":36,"employmentType":37,"industry":39,"skills":41,"baseSalary":96},"https:\u002F\u002Fschema.org\u002F","JobPosting","Wichtiger Hinweis: Bitte aktiviere JavaScript, um diese Seite uneingeschränkt nutzen zu können.\nvorherige Stelle\nnächste Stelle\nYour tasks\nDesigning, building, and maintaining automation workflows and reusable integration components for cyber security operations;\nConnecting security platforms, SIEM\u002FSOAR, EDR\u002FNDR, vulnerability management, and threat intelligence tools through stable data flows;\nImproving operational efficiency by reducing manual effort and increasing the reliability of security processes;\nDeveloping and maintaining REST API integrations, including authentication, authorization, pagination, rate limiting, and error handling;\nWorking with OAuth2, OpenID Connect, JWT, API keys, webhooks, SDKs, and common data formats such as JSON and XML;\nImplementing data mapping, transformation, logging, and exception handling to ensure reliable integrations;\nUsing strong Python skills and practical experience with PowerShell, Bash, or other relevant programming languages;\nApplying Git-based development practices, including version control, branching, pull requests, code reviews, and structured testing;\nApplying secure, maintainable coding practices and supporting CI\u002FCD pipelines where applicable;\nLeveraging experience with cloud integrations, cloud logging, or IAM concepts in Azure, AWS, or GCP is beneficial;\nUtilizing knowledge of dashboards, operational reporting, security metrics, or tools such as Power BI, Grafana, Kibana, or SIEM dashboards;\nApplying familiarity with DevOps tools such as Docker, Kubernetes, Terraform, Ansible, Azure DevOps, GitHub Actions, or GitLab CI where relevant;\nCollaborating with SOC Analysts, Security Architects, Platform Engineers, Infrastructure Teams, and Application Owners;\nSupporting vendor evaluation, technical assessments, integration testing, and controlled rollout of new capabilities;\nApplying detection engineering knowledge where automation workflows interact with SIEM or EDR content, while keeping the main focus on automation and integration.\nYour Profile\nSuccessfully completed studies in cyber security, computer science, business informatics, software engineering or a comparable qualification.\nSenior hands-on engineering profile with 5+ years of experience in security automation, security platform engineering, software development or API-based integration of cyber security products.\nStrong Python skills and practical experience with scripting, REST APIs, secure API authentication, data transformation and integration of vendor SDKs or security tools.\nGood understanding of Git-based development practices, maintainable code, testing, documentation and CI\u002FCD concepts where applicable.\nExperience with security platforms such as Microsoft Defender XDR, Microsoft Sentinel, Splunk, Elastic, CrowdStrike, Palo Alto Cortex, Tenable, Qualys or Rapid7 is beneficial, depending on the target environment.\nKnowledge of cloud integration, operational reporting, DevOps tools or detection engineering concepts is helpful, but not the primary focus of the role.\nAbility to collaborate with SOC Analysts, Security Architects, Platform Engineers, Infrastructure Teams and Application Owners when designing and improving automation solutions.\nStrong analytical skills, ownership and the ability to communicate technical integration topics clearly to technical and non-technical stakeholders.\nGood command of English in speaking and writing.\nIn return, we offer:\nGood work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours, work-from-home and work from abroad opportunities;\nLuxury package of additional health and dental insurance;\nFood vouchers in the amount of EUR 80 monthly;\n6 additional annual days off for exceptional circumstances\nEmployee assistance program for psychological, financial and legal consultations;\nMultisport card;\nAnnual contribution of EUR 153.39 net per child for a summer camp\u002Fschool\u002Fkindergarten for children up to age of 15;\nPossibilities for building career-advancing skills by covering training\u002Fcertification courses and conferences based on individual learning and development needs, access to an online learning platform;\nOpportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center;\nFriendly and supportive multicultural environment, open to new opinions and ideas.\nCommerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.\nOur Benefits\nLearning Platforms\nChildren Summer Camp Contribution\nEmployee assistance program\n6 Exceptional Days Off\nFood vouchers\n25 up to 31 annual paid leave\nMultisport Card\nHealth& Dental Insurance\nWork-life balance\nWork internationally\nLearning Platforms; Children Summer Camp Contribution; Employee assistance program; 6 Exceptional Days Off; Food vouchers; 25 up to 31 annual paid leave; Multisport Card; Health& Dental Insurance; Work-life balance; Work internationally\nBookmark job ad\nPrint job ad\nShare job ad\nThe company\nCommerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.\nAs part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey, and we are looking for a\nSenior Security Automation & Integration Engineer\nin our\nCyber Defense and Security Base Services\nteam.\nCluster Cyber Defense & Base services provides 1. LoD activities within the Commerzbank Cyber Security Origination. In addition, to these operational topics the cluster also develops and operates a variety of security tools which are used by the operational units SOC and Threat Intelligence.\nIn the Cluster Organization, business analysts, engineers and product owners work together as a team. The agile methods support the team members in performing their functions by facilitating a rapid and flexible response to changing conditions and customer needs through an iterative approach and the continual development of new solutions resulting in better products, higher quality, and more efficient processes.\nThe role focuses on developing and maintaining automation and integration solutions for cyber security operations. The engineer builds API-based integrations, reusable workflow components and reliable data flows between security platforms to improve operational efficiency, reduce manual effort and support scalable cyber defense processes.\nContact\nApply now with your up-to-date CV in English!\nDue to the high volume of applications, we contact only the candidates who best match the role requirements. If you do not hear from us within 14 days, please consider that we won't proceed with your application at this stage.\nVerwandte Stellen\nBitte warten...\nvorherige Stelle\nnächste Stelle\nZurück\nTeilen über deinen Social Media Account\nKlicke auf eines der Icons:\nTeilen über Mail\nTeilen über Facebook\nTeilen über X\nTeilen über Xing\nTeilen über LinkedIn",{"@type":18,"name":9},"Organization","2026-07-09","2027-07-09",[22,33],{"@type":23,"address":24,"geo":29},"Place",{"@type":25,"addressLocality":26,"addressCountry":27,"addressRegion":28},"PostalAddress","Sofia","BG","Sofia City Province",{"@type":30,"latitude":31,"longitude":32},"GeoCoordinates",42.6303775,23.3766917,{"@type":23,"address":34,"geo":35},{"@type":25,"addressLocality":26,"addressCountry":27,"addressRegion":28},{"@type":30,"latitude":31,"longitude":32},"HYBRID",[38],"PERMANENT",[40],"Banking and Financial Services",[42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95],"Python","PowerShell","Bash","REST API","OAuth2","OpenID Connect","JWT","API keys","Webhooks","SDKs","JSON","XML","Git","CI\u002FCD","Docker","Kubernetes","Terraform","Ansible","Azure DevOps","GitHub Actions","GitLab CI","Power BI","Grafana","Kibana","SIEM dashboards","Microsoft Defender XDR","Microsoft Sentinel","Splunk","Elastic","CrowdStrike","Palo Alto Cortex","Tenable","Qualys","Rapid7","Collaboration","Analytical Skills","Ownership","Communication","Security Automation","Security Platform Engineering","Software Development","API-based Integration","Data Mapping","Data Transformation","Logging","Exception Handling","Secure Coding Practices","Cloud Integration","IAM Concepts","Detection Engineering","Vendor Evaluation","Technical Assessments","Integration Testing","Controlled Rollout",{"@type":97,"currency":98,"value":99},"MonetaryAmount","EUR",{"@type":100,"minValue":101,"maxValue":102,"unitText":103},"QuantitativeValue",60000,90000,"YEAR",[31,31],[32,32],"permanent",[108],"FULL_TIME",[108],"hybrid","estimated",[113,114,115,116,117,118,119,120,121,122,123,124],"25 days annual paid leave, increasing by 1 day per year up to 31 days","Flexible working hours","Work-from-home and work-from-abroad opportunities","Additional health and dental insurance","Food vouchers of EUR 80 monthly","6 additional annual days off for exceptional circumstances","Employee assistance program for psychological, financial and legal consultations","Multisport card","Annual contribution of EUR 153.39 net per child for summer camp\u002Fschool\u002Fkindergarten for children up to age 15","Training\u002Fcertification courses and conferences coverage","Access to online learning platform","Long-term professional development opportunities",[113,114,115,116,117,118,119,120,121,122,123,124],"banking and financial services",[128],"samara street, 1706, sofia, bulgarien",[130],"Mladost, ul. \"Samara\", 1715 Sofia, Bulgarien",[132],"ulitsa \"Samara\"",[26],[135],"1715",[137],"Bulgarien",[27],"Wichtiger Hinweis: Bitte aktiviere JavaScript, um diese Seite uneingeschränkt nutzen zu können.\n\nvorherige Stelle\n\nnächste Stelle\n\n## Your tasks\n\n- Designing, building, and maintaining automation workflows and reusable integration components for cyber security operations;\n- Connecting security platforms, SIEM\u002FSOAR, EDR\u002FNDR, vulnerability management, and threat intelligence tools through stable data flows;\n- Improving operational efficiency by reducing manual effort and increasing the reliability of security processes;\n- Developing and maintaining REST API integrations, including authentication, authorization, pagination, rate limiting, and error handling;\n- Working with OAuth2, OpenID Connect, JWT, API keys, webhooks, SDKs, and common data formats such as JSON and XML;\n- Implementing data mapping, transformation, logging, and exception handling to ensure reliable integrations;\n- Using strong Python skills and practical experience with PowerShell, Bash, or other relevant programming languages;\n- Applying Git-based development practices, including version control, branching, pull requests, code reviews, and structured testing;\n- Applying secure, maintainable coding practices and supporting CI\u002FCD pipelines where applicable;\n- Leveraging experience with cloud integrations, cloud logging, or IAM concepts in Azure, AWS, or GCP is beneficial;\n- Utilizing knowledge of dashboards, operational reporting, security metrics, or tools such as Power BI, Grafana, Kibana, or SIEM dashboards;\n- Applying familiarity with DevOps tools such as Docker, Kubernetes, Terraform, Ansible, Azure DevOps, GitHub Actions, or GitLab CI where relevant;\n- Collaborating with SOC Analysts, Security Architects, Platform Engineers, Infrastructure Teams, and Application Owners;\n- Supporting vendor evaluation, technical assessments, integration testing, and controlled rollout of new capabilities;\n- Applying detection engineering knowledge where automation workflows interact with SIEM or EDR content, while keeping the main focus on automation and integration.\n\n## Your Profile\n\n- Successfully completed studies in cyber security, computer science, business informatics, software engineering or a comparable qualification.\n- Senior hands-on engineering profile with 5+ years of experience in security automation, security platform engineering, software development or API-based integration of cyber security products.\n- Strong Python skills and practical experience with scripting, REST APIs, secure API authentication, data transformation and integration of vendor SDKs or security tools.\n- Good understanding of Git-based development practices, maintainable code, testing, documentation and CI\u002FCD concepts where applicable.\n- Experience with security platforms such as Microsoft Defender XDR, Microsoft Sentinel, Splunk, Elastic, CrowdStrike, Palo Alto Cortex, Tenable, Qualys or Rapid7 is beneficial, depending on the target environment.\n- Knowledge of cloud integration, operational reporting, DevOps tools or detection engineering concepts is helpful, but not the primary focus of the role.\n- Ability to collaborate with SOC Analysts, Security Architects, Platform Engineers, Infrastructure Teams and Application Owners when designing and improving automation solutions.\n- Strong analytical skills, ownership and the ability to communicate technical integration topics clearly to technical and non-technical stakeholders.\n- Good command of English in speaking and writing.\n\n## In return, we offer:\n\n- Good work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours, work-from-home and work from abroad opportunities;\n- Luxury package of additional health and dental insurance;\n- Food vouchers in the amount of EUR 80 monthly;\n- 6 additional annual days off for exceptional circumstances\n- Employee assistance program for psychological, financial and legal consultations;\n- Multisport card;\n- Annual contribution of EUR 153.39 net per child for a summer camp\u002Fschool\u002Fkindergarten for children up to age of 15;\n- Possibilities for building career-advancing skills by covering training\u002Fcertification courses and conferences based on individual learning and development needs, access to an online learning platform;\n- Opportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center;\n- Friendly and supportive multicultural environment, open to new opinions and ideas.\n\nCommerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.\n\n## Our Benefits\n\n- Learning Platforms\n- Children Summer Camp Contribution\n- Employee assistance program\n- 6 Exceptional Days Off\n- Food vouchers\n- 25 up to 31 annual paid leave\n- Multisport Card\n- Health& Dental Insurance\n- Work-life balance\n- Work internationally\n\nLearning Platforms; Children Summer Camp Contribution; Employee assistance program; 6 Exceptional Days Off; Food vouchers; 25 up to 31 annual paid leave; Multisport Card; Health& Dental Insurance; Work-life balance; Work internationally\n\nBookmark job ad\n\nPrint job ad\n\nShare job ad\n\n## The company\n\nCommerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.\n\nAs part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey, and we are looking for a\n\n**Senior Security Automation & Integration Engineer**\n\nin our\n\n**Cyber Defense and Security Base Services**\n\nteam.\n\nCluster Cyber Defense & Base services provides 1. LoD activities within the Commerzbank Cyber Security Origination. In addition, to these operational topics the cluster also develops and operates a variety of security tools which are used by the operational units SOC and Threat Intelligence.\n\nIn the Cluster Organization, business analysts, engineers and product owners work together as a team. The agile methods support the team members in performing their functions by facilitating a rapid and flexible response to changing conditions and customer needs through an iterative approach and the continual development of new solutions resulting in better products, higher quality, and more efficient processes.\n\nThe role focuses on developing and maintaining automation and integration solutions for cyber security operations. The engineer builds API-based integrations, reusable workflow components and reliable data flows between security platforms to improve operational efficiency, reduce manual effort and support scalable cyber defense processes.\n\n## Contact\n\nApply now with your up-to-date CV in English!\n\nDue to the high volume of applications, we contact only the candidates who best match the role requirements. If you do not hear from us within 14 days, please consider that we won't proceed with your application at this stage.\n\n## Verwandte Stellen\n\nBitte warten...\n\nvorherige Stelle\n\nnächste Stelle\n\nZurück\n\nTeilen über deinen Social Media Account\n\nKlicke auf eines der Icons:\n\nTeilen über Mail\n\nTeilen über Facebook\n\nTeilen über X\n\nTeilen über Xing\n\nTeilen über LinkedIn",{"git":141,"jwt":142,"xml":142,"bash":142,"json":142,"sdks":142,"ci\u002Fcd":142,"docker":143,"kibana":143,"oauth2":142,"python":141,"qualys":143,"rapid7":143,"splunk":143,"ansible":143,"elastic":143,"grafana":143,"tenable":143,"api keys":142,"power bi":143,"rest api":141,"webhooks":142,"gitlab ci":143,"terraform":143,"kubernetes":143,"powershell":142,"crowdstrike":143,"azure devops":143,"github actions":143,"openid connect":142,"siem dashboards":143,"palo alto cortex":143,"microsoft sentinel":143,"microsoft defender xdr":143},4,3,2,[42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75],{"collaboration":141,"analytical skills":141,"ownership":141,"communication":141},[76,77,78,79],{"logging":142,"data mapping":142,"iam concepts":142,"cloud integration":142,"vendor evaluation":142,"controlled rollout":142,"exception handling":142,"data transformation":142,"integration testing":142,"security automation":141,"software development":141,"api-based integration":141,"detection engineering":142,"technical assessments":142,"secure coding practices":142,"security platform engineering":141},[80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95],{"detected_language_jobad":150,"required":151},"en",[152],[153],{"language":154,"level":155},"ENGLISH","B2",5,[158,159],"Information and Communications Technology Professionals","Security and Protective Services",[158,159],"https:\u002F\u002Fjobs.commerzbank.com\u002Findex.php?ac=jobad&id=61596","banking","Banking",1]