Cyber Threat Intelligence Lead (m / f / d)

METRO / MAKRO; Düsseldorf; Hybrid; EUR 80.000 - 100.000; Vollzeit

Zusammenfassung

A leading global retail company is seeking a Senior CTI Lead in Düsseldorf. The role involves defining and implementing the Cyber Threat Intelligence strategy and collaborating across teams to ensure alignment with industry standards. Candidates should have at least 5 years of experience in Cyber Threat Intelligence or Cyber Defense. The position offers a flexible working environment, comprehensive training, and various employee benefits including health checks and discounts.

Leistungen

Flexible working hours

30 days of holidays

Comprehensive training

Health days and checks

Free gym and sports classes

Discounted meals

Good transport connections

Company pension plan

Family support programs

Qualifikationen

• Minimum 5 years of experience in Cyber Threat Intelligence or Cyber Defense.
• Deep understanding of the CTI lifecycle and the goals of strategic, operational, tactical, and technical intelligence.
• Hands-on experience with at least one leading Threat Intelligence Platform (TIP).
• Solid knowledge of SIEMs, detection engineering, and threat hunting methodologies.
• Strong analytical and collaborative mindset.
• Demonstrated ownership and a result-oriented approach to driving initiatives forward.

Aufgaben

• Define and implement the Cyber Threat Intelligence (CTI) strategy.
• Set goals and expectations for the CTI team.
• Develop and standardize reporting to stakeholders and executive leadership.
• Collaborate closely with SOC, Incident Response, Risk Management, and IT teams.
• Plan and lead threat hunting initiatives.
• Ensure alignment with industry frameworks.

Jobbeschreibung

About Us

Join METRO's dynamic Cyber Defense team and shape the future of METRO's cyber defense practice. We are committed to building a secure, resilient, and innovative environment across our global operations. As a Senior CTI Lead, you will define and operationalize our CTI strategy, enabling proactive defense and informed decision-making at all levels of the organization.

Your Responsibilities

• Define and implement METRO's Cyber Threat Intelligence (CTI) strategy at both tactical and strategic levels.
• Set goals and expectations for the CTI team delivering Business-as-Usual (BAU) operations.
• Develop and standardize reporting to stakeholders and executive leadership, translating technical intelligence into actionable business insights.
• Collaborate closely with SOC, Incident Response, Risk Management, and IT teams to align intelligence with detection and response efforts.
• Plan and lead threat hunting initiatives based on intelligence-driven hypotheses.
• Ensure alignment with industry frameworks (e.g., MITRE ATT&CK Diamond Model) and the CTI lifecycle.

Qualifications

• Minimum 5 years of experience in Cyber Threat Intelligence or Cyber Defense.
• Deep understanding of the CTI lifecycle and the goals of strategic, operational, tactical, and technical intelligence.
• Hands-on experience with at least one leading Threat Intelligence Platform (TIP).
• Solid knowledge of SIEMs, detection engineering, and threat hunting methodologies.
• Strong analytical and collaborative mindset.
• Demonstrated ownership and a result-oriented approach to driving initiatives forward.

Why Join Us

• Shape the CTI strategy of a global organization.
• Work with cutting-edge tools and a highly skilled cyber defense team.
• Enjoy a culture that values innovation, ownership, and continuous learning.
• Be part of a mission that protects and empowers METRO's digital future.

Additional Information

• Work-life balance: Flexible working hours with the option of mobile working in agreement with your line manager. 30 days of holidays.
• Training: A comprehensive training offer via our own training center or externally.
• Well-being: Health days, health checks, company medical care, and preventive services such as flu shots, as well as employee assistance programs.
• Exciting life on campus: Free gym and sports classes, Rioba coffee bar, canteen with discounted meals, and many campus events.
• Discounts: Discounted Jobticket, discounts in wholesale stores, and at many partner companies.
• Comfort: Good transport connections, free parking spaces, JobBike.
• Company pension plan: Contributions to your pension.
• Family support: Three daycare centers on campus and support for holiday camps for employees' children.

Remote Work & Employment Type

Full-time

Key Skills

All-Source Intelligence, Military Intelligence, GIS, ICD Coding, Intelligence Experience, Military Experience, Analysis Skills, Microsoft PowerPoint, Joint Operations, Intelligence Analysis, Leadership Experience, Writing Skills

Department / Functional Area: Legal

Experience: years

Vacancy: 1