Software Engineer – Application Security & DevSecOps (Implementation Expert)

ProCredit Bank Bulgaria is part of the international ProCredit group, which is headquartered in Frankfurt, Germany. We are a flexible and innovative bank. We are pioneers in the modern and pragmatic banking solutions, personally tested by us, that have positive impact on our customers. We are constantly optimizing our processes, improving customer experience every day. We stand out with convenient and fast digital banking, clear and transparent conditions, and high quality of service. For us, the topic of environmental protection, social responsibility and people's education is not a trend, but a permanent attitude. We believe that people are the engine of change and the instigator of innovation.

We are looking for an experienced Software Engineer to strengthen our Application Security and DevSecOps capabilities. You will embed secure-by-design principles into development processes, integrate SAST/DAST/SCA into CI/CD pipelines, and improve vulnerability management across the SDLC.

Key Responsibilities:

• Implement application security controls in CI/CD (SAST, DAST, SCA)
• Drive secure development practices aligned with OWASP Top 10
• Manage vulnerabilities – identification, prioritization, remediation
• Ensure API and cloud security (Azure, RBAC, IAM)
• Support secure architecture and security assessments (threat modeling, code reviews)
• Coordinate penetration testing and follow up on findings
• Ensure compliance with ISO 27001, DORA, NIS2, EBA

Requirements:

• 3+ years in Application Security / DevSecOps / Software Engineering
• Experience with SAST, DAST tools (e.g. ZAP, Burp) and CI/CD pipelines (Azure DevOps, Jenkins, GitLab)
• Strong knowledge of OWASP, secure coding, API security (OAuth2, JWT)
• Programming experience (Java, C#, Python or similar); .NET is a plus
• Familiarity with cloud (Azure) and container security (Docker/Kubernetes)

Our offer:

• Working in a dynamic international environment
• Professional growth in a motivated team
• Training opportunities and established rules and procedures at work
• Flexible working hours and home office option
• Social benefits: 25 days paid annual leave, additional health insurance, Multisport card, transportation cost amount, additional amount for summer vacation and heating season, preferential conditions for products and services in the bank; preferential fees for education at Denis Diderot School – the private school of the bank.

Only short-listed candidates (selected on submitted CV) will be invited to the upcoming stages of the selection process.

Your application will be treated with strict confidentiality and in compliance with the legal requirements for personal data protection.