- Setup, maintain and use various security tools to identify and manage vulnerability and threat data as part of pre-market & post-market Vulnerability Assessments and Vulnerability Management for mission critical products- Security Risk Assessments, Threat Modeling and Gap Analysis.- Implement and provide guidance for compliance with security standards and regulations.- Review tech specs, software architecture and designs, to provide guidance for engineering teams how to build and maintain secure products- Identify and implement security mitigations and remediations, including updating and patching components, system hardening, deployment of security controls, etc.- Manage configuration of security systems like Firewalls, IDS/IPS.- Research and integrate new security technologies, frameworks and methodologies in the organization- Present findings, recommendations and reports to the client organization’s leadership

Providing security services to Commerzbank Digital Technology Center Sofia.

• Oversee and support the development of vulnerability management programmes,initiatives, integration, and technical assessment.• Direct and/or perform on-going vulnerability assessments on applications and networksand systems. Direct assessment efforts in a prioritized fashion, seeking breadth and depthof coverage where appropriate.• Partner with teams who implement technology and achieve methods for aligning to theirprocesses and reduce vulnerabilities.• Enhance technology and/or process to ensure accurate and up to date inventory of criticalinfrastructure and applications are in place.• Identify roadmap, budget, and priorities relative to infrastructure and application securityassessments.• Serve as an internal information security consultant to the organization. Assist in thereview of applications and/or technology environments to assess information security risk.• Support information security compliance and risk management activities to meet thevulnerability management policy, standards, and requirementsCore Responsibilities:1. Drive the on-going implementation and operation of Vulnerability managementprogram2. Plan and carry out vulnerability scan campaigns. Create reports and present to client(including on occasions executive management) with factual documentation of issuesidentified and clear recommendation for mitigation of found vulnerabilities.3. Assess, document and validate the vulnerability management practices across businessto ensure compliance to company policy and standards are met.4. Assess possible risks to proposed changes to the environment, and if needed recommendalternative solution, or mitigating security controls.

- taking various position within the InfoSec department.- SPoC for Vulnerability management related stuff between provider and company.- Drive the on-going implementation and operation of PKI & Vulnerability management program- Plan and carry out vulnerability scans. Create reports and present to stakeholders.

- Driving security-related and interdisciplinary projects;- Identify, analyse, and recommend IT vendor solutions that support company strategic objectives;- Develop effective IT vendor relationships that ensure continuous high performance and facilitate communications between stakeholders to ensure business expectations are met;- Responsible for WAF & ADDoS service- Responsible for Firewall Rules Review service- Proactively identify and address IT security risks for IT technical implementations and business processes;- Conduct security assessments via vulnerability management and security incident management;- Performed on premises & cloud firewall rulebase change approval- Took part in security incident response activities in Network security domain- Had been primary responsible for firewall change approval, web application firewall services- Enforced compliance with company security policies & standards.- Calculated & improved SLA/KPI metrics for WAF, ADDoS, Firewall Rules Review service

- Managed country-specific information security operations and supported ISO 27001 certification.- Coordinate communication and awareness activities, in particular for the Security Awareness Trainings provided on Group Level- Provided network infrastructure support and administered MS Windows Servers and Terminal Services.- Automated processes through AutoIT and DOS batch file scripting.- Administered software distribution via MS SCCM 2007 and managed Windows XP/7 environments through Active Directory.- SOX process for IS part documentation preparation and observance following

- Provided software maintenance and network support, specializing in MS Windows Servers, Exchange, ISA, SQL, and VMware GSX & ESX.

- Supported database operations, specific software products, and network infrastructure.- Developed and maintained desktop applications and provided staff training.- Creating automation programs with AutoIT script.

- Developed databases and desktop applications, provided fiscal printer support and maintaining network infrastructure

- maintaining and training the staff for a specialized warehouse software- training the staff in cyber security- maintaining and supporting different MS software - MS Windows, Active Directory, MSWord, MSExcel, MSAccess, MS SQL, C#, .NET platform- designing, establishing and supporting the network infrastructure - control, maintain and support the cash registers- designing and supporting secure communication between headquarter and branches- working with ROS of MikroTik

- supporting and administering Restaurant Information System- training the staff and C-level management- resolve hardware and software issues- everyday control of cash registers and sales database