[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-vulnerability-analyst-coba-nearshoring-sofia-bg-de-bg":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":11,"featured_until":7,"is_active":12,"deactivated_at":7,"is_enriched":12,"processed_job_posting_json":13,"processed_latitude":65,"processed_longitude":66,"processed_employment_types":67,"processed_working_hours":68,"processed_working_hours_labels":70,"processed_home_office":71,"processed_salary_min":62,"processed_salary_max":63,"processed_salary_currency":59,"processed_salary_source":72,"processed_benefits":73,"processed_benefits_labels":86,"processed_industry":87,"processed_skills":7,"processed_job_location":88,"processed_full_address_gmaps":90,"processed_street_gmaps":92,"processed_city_gmaps":94,"processed_postal_code_gmaps":95,"processed_country_gmaps":97,"processed_country_iso_code_gmaps":99,"full_description":16,"formatted_description":100,"processed_employment_types_labels":38,"processed_home_office_labels":36,"processed_industry_labels":40,"processed_it_skills":101,"processed_it_skills_labels":103,"processed_soft_skills":104,"processed_soft_skills_labels":106,"processed_job_expertise_skills":107,"processed_job_expertise_skills_labels":109,"processed_language_requirements":110,"processed_total_experience_years":105,"processed_professional_field":117,"processed_professional_field_labels":120,"processed_leadership_role":11,"processed_date_posted":19,"raw_job_url":121,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":122,"canonical_industry_label":123,"max_cpc":124,"actual_cpc":7},71586,"vulnerability-analyst-coba-nearshoring-sofia-bg","Vulnerability Analyst",null,{"name":9,"slug":10,"logo_url":7},"CoBa Nearshoring Sofia BG","coba-nearshoring-sofia-bg",false,true,{"@context":14,"@type":15,"title":6,"description":16,"hiringOrganization":17,"datePosted":19,"validThrough":20,"jobLocation":21,"jobLocationType":36,"employmentType":37,"industry":39,"skills":41,"baseSalary":57},"https:\u002F\u002Fschema.org\u002F","JobPosting","Wichtiger Hinweis: Bitte aktiviere JavaScript, um diese Seite uneingeschränkt nutzen zu können.\nvorherige Stelle\nnächste Stelle\nYour tasks\nEnsuring organizational compliance with security configurations and best practices across infrastructure and applications;\nDriving vulnerability remediation, patch compliance and system hardening activities;\nAnalyzing vulnerability and configuration scan results from relevant tools and platforms;\nIdentifying, prioritizing and tracking remediation of vulnerabilities and configuration weaknesses;\nCollaborating with infrastructure and application owners to define and implement remediation plans;\nFollowing up with stakeholders to ensure timely closure of identified findings;\nDocumenting processes, findings and remediation activities in an audit‑ready manner;\nPreparing and maintaining documentation to support internal and external audits;\nContributing to the continuous improvement of vulnerability and configuration management processes;\nCommunicating technical risk and remediation requirements to non‑technical stakeholders in a clear and structured way;\nSupporting the enhancement of the bank’s overall cyber hygiene and reduction of cyber risk.\nYour profile\nHigh knowledge of\nVulnerability Management\n:\nAnalyzing vulnerability scan results and driving risk‑based remediation and risk acceptance;\nHigh knowledge of\nSystem Hardening & Configuration Management\n:\nEvaluating configuration scan results, identifying misconfigurations and improving configuration baselines;\nGood knowledge of\nPatch Compliance & Patch Management\n:\nMonitoring patch status, validating SLA compliance and recommending process improvements;\nGood knowledge of\nSecurity Standards & Regulatory IT Compliance\n:\nApplying internal security policies and supporting regulatory and audit requirements;\nGood knowledge of\nDocumentation & Audit Readiness\n:\nCreating clear, audit‑ready documentation, SOPs and maintaining traceable records;\nGood knowledge of\nStakeholder Management & Issue Resolution\n:\nCollaborating with asset owners and security teams, driving issue resolution and escalating critical topics;\nGood knowledge of\nCyber Risk Management & Reporting\n:\nTranslating technical findings into risk‑oriented views and reporting on vulnerability\u002Fhygiene KPIs;\nGood knowledge of\nTools & Platforms (e.g. JIRA, ServiceNow SecOps)\n:\nUsing ticketing and workflow tools, ensuring data quality and supporting workflow\u002Fdashboard optimization.\nIn return, we offer:\nGood work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours, work-from-home and work from abroad opportunities;\nLuxury package of additional health and dental insurance;\nFood vouchers in the amount of EUR 80 monthly;\n6 additional annual days off for exceptional circumstances\nEmployee assistance program for psychological, financial and legal consultations;\nMultisport card;\nAnnual contribution of EUR 153.39 net per child for a summer camp\u002Fschool\u002Fkindergarten for children up to age of 15;\nPossibilities for building career-advancing skills by covering training\u002Fcertification courses and conferences based on individual learning and development needs, access to an online learning platform;\nOpportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center;\nFriendly and supportive multicultural environment, open to new opinions and ideas.\nCommerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.\nOur Benefits\nWork internationally\nWork-life balance\nHealth& Dental Insurance\nMultisport Card\n25 up to 31 annual paid leave\n6 Exceptional Days Off\nFood vouchers\nEmployee assistance program\nChildren Summer Camp Contribution\nLearning Platforms\nWork internationally; Work-life balance; Health& Dental Insurance; Multisport Card; 25 up to 31 annual paid leave; 6 Exceptional Days Off; Food vouchers; Employee assistance program; Children Summer Camp Contribution; Learning Platforms\nBookmark job ad\nPrint job ad\nShare job ad\nThe company\nCommerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.\nAs part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey and we are looking for a\nVulnerability Analyst\nin our\nCyber Defense and Base Services\nteam.\nCluster Cyber Defense & Base services provides 1. LoD activities within the Commerzbank Cyber Security Organization. In addition, to these operational topics the cluster also develops and operates a variety of security tools which are used by the operational units SOC and Threat Intelligence.\nIn the Cluster Organization, business analysts, engineers and product owners work together as a team. The agile methods support the team members in performing their functions by facilitating a rapid and flexible response to changing conditions and customer needs through an iterative approach and the continual development of new solutions resulting into better products, higher quality, and more efficient processes.\nThe team works together to ensure that valuable functionalities are provided to customers and that existing products, processes and services are developed and improved in line with customer needs. To achieve this, the team members organize their own activities, working autonomously and with full accountability. Open communication and feedback are key to adopt a fail-fast approach – recognize mistakes and move forward in the right direction.\nContact\nApply now with your up-to-date CV in English!\nDue to the high volume of applications, we contact only the candidates who best match the role requirements. If you do not hear from us within 14 days, please consider that we won't proceed with your application at this stage.\nVerwandte Stellen\nBitte warten...\nvorherige Stelle\nnächste Stelle\nZurück\nTeilen über deinen Social Media Account\nKlicke auf eines der Icons:\nTeilen über Mail\nTeilen über Facebook\nTeilen über X\nTeilen über Xing\nTeilen über LinkedIn",{"@type":18,"name":9},"Organization","2026-05-21","2027-05-21",[22,33],{"@type":23,"address":24,"geo":29},"Place",{"@type":25,"addressLocality":26,"addressCountry":27,"addressRegion":28},"PostalAddress","Sofia","BG","Sofia City Province",{"@type":30,"latitude":31,"longitude":32},"GeoCoordinates",42.6303775,23.3766917,{"@type":23,"address":34,"geo":35},{"@type":25,"addressLocality":26,"addressCountry":27,"addressRegion":28},{"@type":30,"latitude":31,"longitude":32},"HYBRID",[38],"PERMANENT",[40],"Banking and Financial Services",[42,43,44,45,46,47,48,49,50,51,52,53,54,55,56],"JIRA","ServiceNow SecOps","Communication","Collaboration","Stakeholder Management","Documentation","Analytical Thinking","Problem Solving","Vulnerability Management","System Hardening & Configuration Management","Patch Compliance & Patch Management","Security Standards & Regulatory IT Compliance","Documentation & Audit Readiness","Stakeholder Management & Issue Resolution","Cyber Risk Management & Reporting",{"@type":58,"currency":59,"value":60},"MonetaryAmount","EUR",{"@type":61,"minValue":62,"maxValue":63,"unitText":64},"QuantitativeValue",40000,60000,"YEAR",[31,31],[32,32],"permanent",[69],"FULL_TIME",[69],"hybrid","estimated",[74,75,76,77,78,79,80,81,82,83,84,85],"25 days annual paid leave, increasing by 1 day per year up to 31 days","Flexible working hours","Work-from-home and work from abroad opportunities","Additional health and dental insurance","Food vouchers of EUR 80 monthly","6 additional annual days off for exceptional circumstances","Employee assistance program for psychological, financial and legal consultations","Multisport card","Annual contribution of EUR 153.39 net per child for summer camp\u002Fschool\u002Fkindergarten for children up to age 15","Training\u002Fcertification courses and conferences based on individual learning and development needs","Access to an online learning platform","Opportunities for long-term professional development",[74,75,76,77,78,79,80,81,82,83,84,85],"banking and financial services",[89],"samara street, 1706, sofia, bulgarien",[91],"Mladost, ul. \"Samara\", 1715 Sofia, Bulgarien",[93],"ulitsa \"Samara\"",[26],[96],"1715",[98],"Bulgarien",[27],"Wichtiger Hinweis: Bitte aktiviere JavaScript, um diese Seite uneingeschränkt nutzen zu können.\n\nvorherige Stelle\n\nnächste Stelle\n\n## Your tasks\n\n- Ensuring organizational compliance with security configurations and best practices across infrastructure and applications;\n- Driving vulnerability remediation, patch compliance and system hardening activities;\n- Analyzing vulnerability and configuration scan results from relevant tools and platforms;\n- Identifying, prioritizing and tracking remediation of vulnerabilities and configuration weaknesses;\n- Collaborating with infrastructure and application owners to define and implement remediation plans;\n- Following up with stakeholders to ensure timely closure of identified findings;\n- Documenting processes, findings and remediation activities in an audit‑ready manner;\n- Preparing and maintaining documentation to support internal and external audits;\n- Contributing to the continuous improvement of vulnerability and configuration management processes;\n- Communicating technical risk and remediation requirements to non‑technical stakeholders in a clear and structured way;\n- Supporting the enhancement of the bank’s overall cyber hygiene and reduction of cyber risk.\n\n## Your profile\n\nHigh knowledge of **Vulnerability Management**:\n\n- Analyzing vulnerability scan results and driving risk‑based remediation and risk acceptance;\n\nHigh knowledge of **System Hardening & Configuration Management**:\n\n- Evaluating configuration scan results, identifying misconfigurations and improving configuration baselines;\n\nGood knowledge of **Patch Compliance & Patch Management**:\n\n- Monitoring patch status, validating SLA compliance and recommending process improvements;\n\nGood knowledge of **Security Standards & Regulatory IT Compliance**:\n\n- Applying internal security policies and supporting regulatory and audit requirements;\n\nGood knowledge of **Documentation & Audit Readiness**:\n\n- Creating clear, audit‑ready documentation, SOPs and maintaining traceable records;\n\nGood knowledge of **Stakeholder Management & Issue Resolution**:\n\n- Collaborating with asset owners and security teams, driving issue resolution and escalating critical topics;\n\nGood knowledge of **Cyber Risk Management & Reporting**:\n\n- Translating technical findings into risk‑oriented views and reporting on vulnerability\u002Fhygiene KPIs;\n\nGood knowledge of **Tools & Platforms (e.g. JIRA, ServiceNow SecOps)**:\n\n- Using ticketing and workflow tools, ensuring data quality and supporting workflow\u002Fdashboard optimization.\n\nIn return, we offer:\n\n- Good work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours, work-from-home and work from abroad opportunities;\n- Luxury package of additional health and dental insurance;\n- Food vouchers in the amount of EUR 80 monthly;\n- 6 additional annual days off for exceptional circumstances\n- Employee assistance program for psychological, financial and legal consultations;\n- Multisport card;\n- Annual contribution of EUR 153.39 net per child for a summer camp\u002Fschool\u002Fkindergarten for children up to age of 15;\n- Possibilities for building career-advancing skills by covering training\u002Fcertification courses and conferences based on individual learning and development needs, access to an online learning platform;\n- Opportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center;\n- Friendly and supportive multicultural environment, open to new opinions and ideas.\n\nCommerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.\n\n## Our Benefits\n\n- Work internationally\n- Work-life balance\n- Health& Dental Insurance\n- Multisport Card\n- 25 up to 31 annual paid leave\n- 6 Exceptional Days Off\n- Food vouchers\n- Employee assistance program\n- Children Summer Camp Contribution\n- Learning Platforms\n\nWork internationally; Work-life balance; Health& Dental Insurance; Multisport Card; 25 up to 31 annual paid leave; 6 Exceptional Days Off; Food vouchers; Employee assistance program; Children Summer Camp Contribution; Learning Platforms\n\nBookmark job ad\n\nPrint job ad\n\nShare job ad\n\n## The company\n\nCommerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.\n\nAs part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey and we are looking for a **Vulnerability Analyst** in our **Cyber Defense and Base Services** team.\n\nCluster Cyber Defense & Base services provides 1. LoD activities within the Commerzbank Cyber Security Organization. In addition, to these operational topics the cluster also develops and operates a variety of security tools which are used by the operational units SOC and Threat Intelligence.\n\nIn the Cluster Organization, business analysts, engineers and product owners work together as a team. The agile methods support the team members in performing their functions by facilitating a rapid and flexible response to changing conditions and customer needs through an iterative approach and the continual development of new solutions resulting into better products, higher quality, and more efficient processes.\n\nThe team works together to ensure that valuable functionalities are provided to customers and that existing products, processes and services are developed and improved in line with customer needs. To achieve this, the team members organize their own activities, working autonomously and with full accountability. Open communication and feedback are key to adopt a fail-fast approach – recognize mistakes and move forward in the right direction.\n\n## Contact\n\nApply now with your up-to-date CV in English!\n\nDue to the high volume of applications, we contact only the candidates who best match the role requirements. If you do not hear from us within 14 days, please consider that we won't proceed with your application at this stage.\n\n## Verwandte Stellen\n\nBitte warten...\n\nvorherige Stelle\n\nnächste Stelle\n\nZurück\n\nTeilen über deinen Social Media Account\n\nKlicke auf eines der Icons:\n\nTeilen über Mail\n\nTeilen über Facebook\n\nTeilen über X\n\nTeilen über Xing\n\nTeilen über LinkedIn",{"jira":102,"servicenow secops":102},2,[42,43],{"communication":105,"collaboration":105,"stakeholder management":105,"documentation":105,"analytical thinking":105,"problem solving":105},3,[44,45,46,47,48,49],{"vulnerability management":108,"documentation & audit readiness":102,"cyber risk management & reporting":102,"patch compliance & patch management":102,"stakeholder management & issue resolution":102,"system hardening & configuration management":108,"security standards & regulatory it compliance":102},4,[50,51,52,53,54,55,56],{"detected_language_jobad":111,"required":112},"en",[113],[114],{"language":115,"level":116},"ENGLISH","C1",[118,119],"Information and Communications Technology Professionals","Business and Administration Professionals",[118,119],"https:\u002F\u002Fcoba-beesite-production-frontend.app.beesite.de\u002Findex.php?ac=jobad&id=61109","banking","Banking",1]