Senior Cyber Threat Intelligence (CTI) Engineer (f/m)
⚲ Warszawa, Włochy
Do uzgodnienia
Wymagania
- Python
- Git
- Docker
- REST API
Opis stanowiska
Nasze wymagania:
Experience: Proven experience in Cyber Threat Intelligence (CTI), digital forensics, or a highly analytical security role.
CTI Knowledge: Deep understanding of the threat landscape, networking protocols, and modern cyberattack vectors.
Tools & OSINT: Hands-on experience with OSINT tools, threat intelligence platforms (TIPs), and navigating darknet marketplaces safely.
Technical & Automation Skills: Strong scripting and tool development experience (Python, APIs, Git, Docker) to automate threat intelligence workflows.
Mindset: An analytical, "detective" mindset with the ability to connect fragmented data points into a coherent threat picture.
Communication: Excellent communication skills to translate complex technical threats into clear business risks for diverse stakeholders (from technical teams to executive leadership).
Languages: Fluent in English.
Mile widziane:
German is a plus.
O projekcie:
Our team is distributed across Germany and Poland, with the Polish hub steadily growing. We are a diverse mix of experts—from CTI analysts to tech-dedicated specialists and versatile "one-man armies". We leverage various sources of intelligence, including OSINT and other specialized feeds, and we are currently in an exciting phase of onboarding more AI solutions into our daily operations.
What makes this role stand out?
Intelligence into Action: You won't just write reports. Your core focus is bringing threat intelligence into real, defensive actions. You will have a direct hand in developing tools, automating workflows, and directly contributing to the safety of our entire global organization.
Meaningful Business Impact: Your work has a tangible, visible impact. By delivering precise intelligence, you help ensure a safe digital environment for Bosch colleagues worldwide, allowing you and them to thrive together.
Structured, Non-Reactive Workflow: Unlike many highly exposed, purely reactive security roles, our work is regular, structured, and easy to manage within your standard working hours. This provides a sustainable environment where you can build deep expertise and take pride in the results.
Zakres obowiązków:
Monitoring the external landscape: Actively monitoring the global threat landscape using Open Source Intelligence (OSINT), commercial threat feeds, Dark Web forums, and underground communities to identify emerging threat actors and trends.
Tracking targeted threats: Hunting for indicators of compromise (IoCs), leaked credentials, exposed infrastructure, or brand impersonation campaigns specifically targeting our organization, supply chain, or industry.
Preparing proactive defenses: Translating external threat data into actionable defense strategies by working closely with our SOC and engineering teams to update firewall rules, prioritize vulnerability patching, and fine-tune detection mechanisms before an attack occurs.
Profiling adversaries: Analyzing and mapping threat actor tactics, techniques, and procedures (TTPs) using frameworks like MITRE ATT&CK to understand who wants to target us and how.
Delivering early warnings and reporting: Providing timely, high-fidelity threat briefings and alerts to both technical teams and executive leadership to drive informed, risk-based decisions.
Developing and automating tools: Building and improving internal tools for threat analysis, collection, and monitoring (using Python, REST APIs, Git, Docker).
Oferujemy:
Bosch’s culture of innovation and digital transformation offers you a fantastic platform to grow your skills and enhance your network. We are dedicated to building a warm, open, transparent, and inclusive work environment for all.
Work #LikeABosch:
Employment Contract
Competitive salary + annual bonus
Copyright costs for IT employees (Koszty Uzyskania Przychodu)
Hybrid work with flexible working hours
Grow #LikeABosch:
Complex environment of working, professional support and possibility to share knowledge and best practices
Ongoing development opportunities in a multinational environment
Broad access to professional trainings, conferences and webinars
Live #LikeABosch:
Private medical care and life insurance
Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinema tickets, etc.)
Prepaid Lunch Card
Number of benefits for families (for instance summer camps for kids)
Non-working day on the 31st of December
Experience: Proven experience in Cyber Threat Intelligence (CTI), digital forensics, or a highly analytical security role.
CTI Knowledge: Deep understanding of the threat landscape, networking protocols, and modern cyberattack vectors.
Tools & OSINT: Hands-on experience with OSINT tools, threat intelligence platforms (TIPs), and navigating darknet marketplaces safely.
Technical & Automation Skills: Strong scripting and tool development experience (Python, APIs, Git, Docker) to automate threat intelligence workflows.
Mindset: An analytical, "detective" mindset with the ability to connect fragmented data points into a coherent threat picture.
Communication: Excellent communication skills to translate complex technical threats into clear business risks for diverse stakeholders (from technical teams to executive leadership).
Languages: Fluent in English.
Mile widziane:
German is a plus.
O projekcie:
Our team is distributed across Germany and Poland, with the Polish hub steadily growing. We are a diverse mix of experts—from CTI analysts to tech-dedicated specialists and versatile "one-man armies". We leverage various sources of intelligence, including OSINT and other specialized feeds, and we are currently in an exciting phase of onboarding more AI solutions into our daily operations.
What makes this role stand out?
Intelligence into Action: You won't just write reports. Your core focus is bringing threat intelligence into real, defensive actions. You will have a direct hand in developing tools, automating workflows, and directly contributing to the safety of our entire global organization.
Meaningful Business Impact: Your work has a tangible, visible impact. By delivering precise intelligence, you help ensure a safe digital environment for Bosch colleagues worldwide, allowing you and them to thrive together.
Structured, Non-Reactive Workflow: Unlike many highly exposed, purely reactive security roles, our work is regular, structured, and easy to manage within your standard working hours. This provides a sustainable environment where you can build deep expertise and take pride in the results.
Zakres obowiązków:
Monitoring the external landscape: Actively monitoring the global threat landscape using Open Source Intelligence (OSINT), commercial threat feeds, Dark Web forums, and underground communities to identify emerging threat actors and trends.
Tracking targeted threats: Hunting for indicators of compromise (IoCs), leaked credentials, exposed infrastructure, or brand impersonation campaigns specifically targeting our organization, supply chain, or industry.
Preparing proactive defenses: Translating external threat data into actionable defense strategies by working closely with our SOC and engineering teams to update firewall rules, prioritize vulnerability patching, and fine-tune detection mechanisms before an attack occurs.
Profiling adversaries: Analyzing and mapping threat actor tactics, techniques, and procedures (TTPs) using frameworks like MITRE ATT&CK to understand who wants to target us and how.
Delivering early warnings and reporting: Providing timely, high-fidelity threat briefings and alerts to both technical teams and executive leadership to drive informed, risk-based decisions.
Developing and automating tools: Building and improving internal tools for threat analysis, collection, and monitoring (using Python, REST APIs, Git, Docker).
Oferujemy:
Bosch’s culture of innovation and digital transformation offers you a fantastic platform to grow your skills and enhance your network. We are dedicated to building a warm, open, transparent, and inclusive work environment for all.
Work #LikeABosch:
Employment Contract
Competitive salary + annual bonus
Copyright costs for IT employees (Koszty Uzyskania Przychodu)
Hybrid work with flexible working hours
Grow #LikeABosch:
Complex environment of working, professional support and possibility to share knowledge and best practices
Ongoing development opportunities in a multinational environment
Broad access to professional trainings, conferences and webinars
Live #LikeABosch:
Private medical care and life insurance
Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinema tickets, etc.)
Prepaid Lunch Card
Number of benefits for families (for instance summer camps for kids)
Non-working day on the 31st of December
🔍 Dekoder Ogłoszenia
🔴
versatile "one-man armies"
Oczekuje się, że będziesz w stanie samodzielnie realizować wiele zadań i być elastycznym w zakresie swoich obowiązków.
🔴
exciting phase of onboarding more AI solutions into our daily operations
Może to oznaczać, że narzędzia AI są nowe, niedopracowane lub wymagają intensywnego wsparcia i testowania.
🔴
Intelligence into Action: You won't just write reports. Your core focus is bringing threat intelligence into real, defensive actions.
Oznacza to, że oczekuje się od Ciebie nie tylko analizy, ale także aktywnego wdrażania wniosków w praktyczne działania obronne, co może być bardziej wymagające niż samo raportowanie.
🟡
Polish hub steadily growing
Chociaż brzmi pozytywnie, może oznaczać, że struktury i procesy w polskim oddziale są wciąż w fazie rozwoju i mogą być mniej ustabilizowane.
🟡
navigating darknet marketplaces safely
Wymaga to nie tylko umiejętności technicznych, ale także ostrożności i świadomości potencjalnych zagrożeń związanych z takimi działaniami.