Skip to content

Open nowPosted today

Insider Risk – Rule Management Engineer (f/m/x)

DB1,316 open roles

Where
Bucharest, 6A Dimitrie Pompeiu Blvd
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInsider Risk – Rule Management Engineer (f/m/x)DB · Bucharest, 6A Dimitrie Pompeiu Blvd
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on DB's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market. DB postings stay open a median of 19 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: posted today

DB median: 19 days open

The posting

Job Description:

DB Global Technology is Deutsche Bank’s technology centre in Central and Eastern Europe. Since its set-up in 2013, Bucharest Technology Centre (BEX) has constantly proven its capacity to deliver global technology products and services, playing a dynamic role in the Bank’s technology transformation.

We have a robust, hands-on engineering culture dedicated to continuous learning, knowledge-sharing, technical skill development and networking. We are an essential part of the Bank’s technology platform and develop applications for many important business areas.

This role is critical for shaping the organization’s insider risk posture. A Rule Management Specialist ensures that the DB’s platform is tuned to accurately detect risky behaviors, provide actionable intelligence, and support the Insider Risk Management (IRM) strategy while minimizing noise and false positives.

This role is ideal for an experienced insider risk specialist who combines technical depth, analytical thinking, and strong collaboration skills.

Key Responsibilities:

  • Rule Development & Management:Translate organizational insider risk policies, use cases, and threat scenarios into actionable rules. Create, configure, and maintain behavioural indicators, risk models, and detection rules. Implement and refine risk scoring profiles to categorize user behaviours (e.g., negligent, malicious, compromised). Manage baseline configurations to reduce false positives while ensuring meaningful detection. Maintain documentation for all rules, logic workflows, and rule change histories.
  • Design and model insider threat scenarios, such as:Data exfiltration attempts Privilege misuse Shadow IT behaviours Anomalous data handling or print spikes Obfuscation or evasion behaviours
  • Monitoring, Analysis, and Optimization:Perform impact assessments before deploying new rules into production environments. Continuously monitor rule performance, alert accuracy, and telemetry patterns Tune rule thresholds and behavioural indicators to improve detection fidelity and reduce fatigue. Conduct periodic audits to ensure rule sets remain aligned with current business processes and emerging insider risk trends.
  • Cross‑Functional Collaboration:Work with other Insider Risk Management teams and Security Operations to test and validate new use cases end‑to‑end. Partner with Security Operations to ensure alerts seamlessly integrate into SIEM/SOAR workflows. Provide subject‑matter expertise during risk reviews, audits, and tabletop exercises.

Qualifications:

  • Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Data Analytics, or a related field.
  • Experience:3–7 years of experience in Cybersecurity, Insider Threat, IRM, or SOC operations, or related fields. Hands‑on experience with Insider Risk platforms (tools like Microsoft Purview, DTEX, Proofpoint, Code42).

Skills:

  • Proficiency in scripting languages (e.g., Python) or query languages (e.g., SQL or SPL or KQL) for data manipulation and analysis and reporting.
  • Strong understanding of behavioral analytics, telemetry, user activity monitoring, and data classification.
  • Familiarity with Data Loss Prevention, User and Entity Behavior Analytics, and endpoint security technologies.
  • Understanding of common attack vectors, threat actor methodologies, and data exfiltration techniques.
  • Strong written and verbal communication skills, especially for documenting rules and communicating with non‑technical stakeholders.

Relevant certifications: CISSP, CISM, GCIH, CCSP, or similar are a plus

Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

Well-being & Benefits

Emotionally and mentally balanced: We support you in dealing with life crises, maintaining stability through illness, and maintaining good mental health.

  • Empowering managers who value your ideas and decisions. Show your positive attitude, determination, and open-mindedness.
  • A professional, passionate, and fun workplace.
  • A modern office with fun and relaxing areas to boost creativity.
  • Continuous learning culture with coaching and support from team experts.
  • A culture where you can openly speak about mental health.

Physically thriving: We support you in managing your physical health by taking appropriate preventive measures and providing a workplace that helps you thrive. For example, Private healthcare and life insurance with premium benefits for you and discounts for your loved ones, healthier ways of working and check-ups.

Socially connected: We strongly believe in collaboration, inclusion and feeling connected to open up new perspectives and strengthen our self-confidence and well-being.

  • 24 days holiday, loyalty days, and bank holidays (including weekdays for weekend bank holidays).
  • Hybrid working model with 40% remote work.
  • Options for flexible working hours.
  • Enjoy retailer discounts, cultural and CSR activities, workshops, and more.

Financially secure: We support you in meeting personal financial goals during your active career and for the future.

  • Competitive income, performance-based promotions, and a sense of purpose.
  • Meal vouchers, bonuses for referrals

Interested in more: discover what our employees value in the Well-being & Benefits hub!

We strive for a Culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively. Together we share and celebrate the successes of our people. Together we are Deutsche Bank.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against DB's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on DB's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    DB's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.