Your tasks
- Designing and reviewing secure system architecture;
- Conducting security controls and best practices as well as advisory services;
- Collaborating with DevOps, DevSecOps & SecOps teams to ensure secure coding practices and coordination with interfaces;
- Conducting security audits and compliance assessments (processes & tools);
- Developing and enforcing cloud-related policies, standards, guidelines, defining access controls, data protection measures, resource provisioning policies, and cost optimization guidelines;
- Assessing the effectiveness of security controls and policies;
- Conducting compliance audits against regulatory standards;
- Producing audit reports and recommendations for improvement.
Your profile
- Experience in IT infrastructure and IT security as well as in the analysis of log data (Unix Linux derivatives, Windows operating systems, databases);
- Practical experience with different exposure management or vulnerability scanning platforms in initiating analysis of enterprise environment (false positives, misconfiguration, malfunctions, etc.) and troubleshooting;
- Experience with hardening of systems;
- Knowledge regarding data import in different scanning tools or attack simulators, dashboards and reporting. Creation of customized dashboards and reports;
- Experience in the analysis, creation and review of SIEM use cases including source connection and creation of custom connectors;
- Understanding of cloud architecture;
- Experience with Cloud providers;
- Practical and theoretical knowledge in IAM;
- Experience with Data encryption;
- Experience with threat hunting activities. Deep understanding of attacker behaviors, malware analysis, and lateral movement techniques.
In return, we offer:
- Good work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours, work-from-home and work from abroad opportunities;
- Luxury package of additional health and dental insurance;
- Food vouchers in the amount of EUR 80 monthly;
- 6 additional annual days off for exceptional circumstances
- Employee assistance program for psychological, financial and legal consultations;
- Multisport card;
- Annual contribution of EUR 153.39 net per child for a summer camp/school/kindergarten for children up to age of 15;
- Possibilities for building career-advancing skills by covering training/certification courses and conferences based on individual learning and development needs, access to an online learning platform;
- Opportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center;
- Friendly and supportive multicultural environment, open to new opinions and ideas.
Commerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.
Our Benefits
- Learning Platforms
- Children Summer Camp Contribution
- Employee assistance program
- Food vouchers
- 25 up to 31 annual paid leave
- 6 Exceptional Days Off
- Multisport Card
- Health& Dental Insurance
- Work-life balance
- Work internationally
Learning Platforms; Children Summer Camp Contribution; Employee assistance program; Food vouchers; 25 up to 31 annual paid leave; 6 Exceptional Days Off; Multisport Card; Health& Dental Insurance; Work-life balance; Work internationally
Bookmark job ad Print job ad Share job ad
The company
Commerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.
As part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey and we are looking for a IT Security Engineer in our flexhub team.
What is flexhub?
We are Commerzbank's internal delivery capability - a team of engineers, architects, analysts and experts working directly with business units. Unlike external consultancies, we are colleagues who stay. Based in Frankfurt, Sofia, and Łódź, we drive high-priority initiatives while building internal expertise that lasts.
What's in it for you:
Consulting variety meets corporate stability. You join different teams across the bank when your expertise is needed, then move on to the next challenge. This approach helps you build strong internal know-how and gives you the chance to contribute to meaningful work - one initiative at a time - without sales targets or utilization pressure. No selling. Just a consistent focus on engineering solutions that matter.
Contact
Challenge accepted? Apply now with your up-to-date CV in English!
Only shortlisted candidates will be invited to interview.
