Security Operations & Risk Automation Engineer

BVNK, South Africa, Bulgaria +1

What you will do

Systematic Risk Reduction: Design, build, and deploy automated workflows to continuously identify, discover, map, and mitigate security risks across separate business environments and bespoke tools.
Cross-System Access Automation: Programmatically orchestrate and streamline complex user access reviews across disconnected internal and external systems that may utilise independent user management interfaces.
Bug Bounty Programme Management: Implement, manage, and scale the company's external bug bounty programme. Act as the primary internal interface to validate crowdsourced findings and track them through to successful remediation.

What you need

Bachelor's degree in Information Security, Computer Science, IT Audit, Risk Management, or equivalent practical experience.
2–4 years of experience in technical GRC, IT Audit, Operational Risk Management, or an automation-focused information security or compliance role.
Vulnerability Program Exposure: Prior exposure to managing or triage coordination for a bug bounty platform (e.g., HackerOne, Bugcrowd) or working closely with external application security researchers is a strong plus.
Platform Experience: Practical familiarity operating automated compliance software like Vanta or equivalent GRC platforms is a plus.
Risk Identification & Mitigation: Exceptional analytical capabilities to isolate operational vulnerabilities within heavily customised environments, third-party software integrations, and decentralized access registers.
Regulated Fintech Exposure: Direct experience managing controls aligned with financial and cybersecurity frameworks, specifically including AML rules, MiCA guidelines, and DORA requirements.
Technical Scaffolding & Automation: Skill in translating text-heavy regulatory mandates and manual review processes into programmatic triggers and automated detection mechanisms, implementing AI and other technical tools at scale.
Architectural Literacy: Strong conceptual understanding of modern infrastructure components—such as Amazon AWS, containers (Docker), microservices architecture, and API ecosystems—enabling effective risk oversight in highly technical environments.
Policy Crafting: Proven ability to author clear, executive-ready information security policies that bridge engineering workflows with financial-grade compliance obligations.

What you can expect from us

Fair and competitive salary at every stage of your growth
Flexible working hours, with hybrid working at its heart
A culture built on passionate, growth-minded people
A flexible approach to holiday
Opportunities to travel to our offices around the world
An open and creative environment where you can help us define the future of BVNK, its culture, and its opportunity sets

At BVNK, we are focused on building a diverse and inclusive team. While you may not meet all of our requirements, we’d encourage you to apply if you meet the majority of our expectations. You may be a great fit for this role or another role in our team.

Compensation packages are based on candidate experience and relevant certifications.

Security Operations & Risk Automation Engineer

What you will do

Security Operations & Risk Automation Engineer

What you will do

What you need

What you can expect from us

We're incredibly honored to have been recognized by

Bulgaria Salary Range

About BVNK

Similar jobs at other companies

Application Security Engineer

Senior Security Operations Engineer

Staff Software Engineer - DevEx

Senior Engineering Manager, Risk Platform

Senior Security Engineer - xStocks

Staff Security Architect

Interview questions

BVNK