[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Commerzbank jobs](https://jobs.opennash.com/companies/commerzbank/) · [Search jobs](/search/) Commerzbank · Sofia # Product Owner Vulnerability Scanning Sofia EUR 80 month Product Listed on Commerzbank’s official careers site. Posted May 27, 2026. Check that it is still open and apply there. [Apply on Commerzbank’s careers site →](https://jobs.commerzbank.com/index.php?ac=jobad&id=59252) [OpenNash Jobs](https://jobs.opennash.com/) / [Commerzbank](https://jobs.opennash.com/companies/commerzbank/) / Product Owner Vulnerability Scanning ## Job description Your tasks Leading the transformation from traditional Vulnerability Management to a holistic CTEM program. Identifying capability gaps and drive the selection and implementation of new tools to complete the full exposure lifecycle. Overseeing the engineering and operation of our core Exposure Management ecosystem, specifically Tenable One and XM Cyber. Ensuring optimal configuration and health. Ensuring seamless integration of security scanning within the SDLC and managing cloud-native scanning posture for Google Cloud Platform (GCP) and Microsoft Azure. Ensuring that solutions and workflows derived from these requirements adhere to DevSecOps best practices (automation, integration into CI/CD and SDLC, “security by design”). Collaborating with Service Management to ensure that requirements are reflected in service definitions, SLAs/OLAs, reporting and KPIs. ### Prioritization & Validation Moving beyond CVSS scores. Leveraging Attack Path Management (XM Cyber) to validate risks and prioritize remediation based on actual exploitability and business impact. Providing technical direction and mentorship to the engineering team. Managing the backlog, ensuring a balance between operational stability and strategic project implementation. Bridging the gap between security findings and IT operations. Designing automated workflows and clear metrics to ensure valid threats are remediated swiftly. Ensuring the expanded CTEM scope satisfies strict banking regulations. Your profile Experience with Exposure management platforms. Deep understanding of the vulnerability management lifecycle. Hands-on experience with enterprise vulnerability management platforms for network, agent-based, and container scanning. Experience with Web application scanning. Proven experience with CTEM platforms and attack simulation concepts to identify, visualize, and prioritize critical security gaps. Understanding of the cloud architecture. Experience and knowledge of cloud security principles. Understanding of CSPM, CNAPP, “Shift-Left Security” approach will be beneficial. Solid understanding of DevSecOps concepts (security in CI/CD pipelines and SDLC, automation, quality gates). Experience in auditing and scanning systems against industry standard security configuration guidelines, such as CIS benchmark. Create and maintain detailed product roadmap that outlines prioritized features, enhancements and integrations. ### In return, we offer Good work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours, work-from-home and work from abroad opportunities; Luxury package of additional health and dental insurance; Food vouchers in the amount of EUR 80 monthly; 6 additional annual days off for exceptional circumstances Employee assistance program for psychological, financial and legal consultations; Multisport card; Annual contribution of EUR 153.39 net per child for a summer camp/school/kindergarten for children up to age of 15; Possibilities for building career-advancing skills by covering training/certification courses and conferences based on individual learning and development needs, access to an online learning platform; Opportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center; Friendly and supportive multicultural environment, open to new opinions and ideas. Commerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics. The company Commerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise. As part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey and we are looking for a Product Owner Vulnerability Scanning in our Cyber Defense and Base Services team. Contact Apply now with your up-to-date CV in English! Due to the high volume of applications, we contact only the candidates who best match the role requirements. If you do not hear from us within 14 days, please consider that we won't proceed with your application at this stage. ## At a glance - Posted by the employer: May 27, 2026 - First seen by OpenNash: Aug 1, 2026 - Last checked: Oct 19, 2026 - Listed for: 145 days - Location: Sofia - Pay: EUR 80 month[Apply on Commerzbank’s careers site →](https://jobs.commerzbank.com/index.php?ac=jobad&id=59252) ## More jobs at Commerzbank ### [Product Owner (Catalogue Application)](https://jobs.opennash.com/companies/commerzbank/jobs/9f70ed44fd8ceeddfdad/) Sofia ### [Technical Product Manager (Cryptographic Inventory)](https://jobs.opennash.com/companies/commerzbank/jobs/a997adf320c083e0f66d/) Sofia ### [(Senior) Data Scientist (flexhub)](https://jobs.opennash.com/companies/commerzbank/jobs/9266ca181635f91965fb/) Sofia ### [(Senior) Java Developer (flexhub)](https://jobs.opennash.com/companies/commerzbank/jobs/128380d909237ff71cdb/) Sofia ### [AI Enablement & Agent Engineering Specialist](https://jobs.opennash.com/companies/commerzbank/jobs/3288f37497465337410c/) Sofia ## Similar jobs at other companies ### [product development product owner](https://jobs.opennash.com/companies/richemont/jobs/a261dfb77294ac873e89/) Richemont ### [Product Owner Digital Product Experience](https://jobs.opennash.com/companies/infineon-technologies/jobs/e5233230236de9ec7d18/) Infineon Technologies · Bangalore BTP ### [Product Owner/Product Delivery – Senior Associate](https://jobs.opennash.com/companies/jpmorganchase/jobs/9067a19b071f56566d1a/) JPMorganChase · Mumbai, Maharashtra, India ### [Technical Product Owner](https://jobs.opennash.com/companies/allianz/jobs/91f9b94287b3a27481a1/) Allianz · Mkalles, Lebanon ### [Product Owner Lead](https://jobs.opennash.com/companies/ntt/jobs/261cd26be20381d2e34b/) NTT · Brasov, Romania [Product jobs](/functions/product/) OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)