Cyber Threat Detection Analyst / Engineer (f/m)

Bosch Group; Polska; Hybrid; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Employment contract

Hybrid work with flexible hours

Referral bonus program

Competitive salary + annual bonus

Private medical care

Job summary

Bosch is seeking a Cyber Threat Detection Analyst / Engineer (f/m) for a full-time, hybrid role. You will analyze CTI, identify detection gaps, emulate adversaries, and develop high-fidelity rules to strengthen security coverage.

Collaborate with SOC and incident response, apply MITRE ATT&CK, and automate with Python, PowerShell, and SQL/KQL. Fluent English required; German or other languages are a plus. Employment contract with benefits.

Qualifications

• Proven experience in detection engineering, threat hunting, or related security field.
• Experience converting hypotheses into attack-technique mappings (ATT&CK) is valued.

Responsibilities

• Analyze CTI, assess attack surfaces, and identify visibility and detection gaps.
• Emulate adversaries and run simulations to validate detection coverage.
• Develop, test, and tune high-fidelity detection rules and preventive controls.
• Collaborate with SOC and incident response to optimize playbooks and reduce false positives.

Skills

Fluent English

Analytical

Structured

Investigative mindset

Tools

Python

PowerShell

Bash

SQL

KQL

Splunk SPL

MITRE ATT&CK

Job description

Cyber Threat Detection Analyst / Engineer (f/m)

• Full-time

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people’s lives. Our promise to our associates is rock-solid: we enjoy our work, we inspire each other, we provide equal growth opportunities for all team members, all roles are represented in all countries. We grow together!

Visibility & Detection Gap Analysis: Conduct analyses of Cyber Threat Intelligence (CTI), attack surfaces, and the current detection landscape to identify and prioritize visibility and detection gaps.

Adversary Emulation: Perform adversary emulation and simulations to validate and continuously improve detection coverage.

Rule Development & Tuning: Develop, test, and tune high-fidelity detection rules and preventive controls to strengthen the overall security posture.

SOC Collaboration: Collaborate with SOC and incident response teams to streamline alert triage, optimize playbooks, and reduce false positives.

Professional Experience: Multiple years of experience in detection engineering/content development, threat hunting, or offensive security.

Technical Expertise: Deep expertise in the MITRE ATT&CK® framework, from converting hypotheses into MITRE-mapped adversary TTPs to evaluating potential visibility and coverage gaps.

Programming & Automation: Proficient in scripting and automation languages (e.g., Python, PowerShell, Bash) and proven experience in most commonly used query languages (e.g., KQL, SQL, Splunk SPL).

Certifications (Strong Plus): Offensive security certifications (e.g., OSCP, OSEP, CRTO, GXPN, GPEN, GCIH or other relevant GIAC/offensive certifications).

• Threat Intelligence & SOC: Familiarity with or formal training in Cyber Threat Intelligence (CTI) and/or SOC Analyst experience (e.g., Microsoft SC-200) is a strong asset
• Soft Skills & Language: Analytical, structured, and investigative mindset; fluent English is a must (German or other European languages are a plus).

Bosch’s culture of innovation and digital transformation offers you a fantastic platform to grow your skills and enhance your network. We are dedicated to building a warm, open, transparent, and inclusive work environment for all.

• EmploymentContract
• Competitive salary + annual bonus
• Hybrid work with flexible working hours
• Referral Bonus Program
• Copyright costs for IT employees

Grow LikeABosch:

• Complex environment of working, professional support and possibility to share knowledge and best practices
• Ongoing development opportunities in a multinational environment
• Broad access to professional trainings (incl. language courses), conferences and webinars
• Private medical care and life insurance
• Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinematickets, etc.)
• Prepaid Lunch CardNumber of benefits for families (for instance summer camps for kids)
• Non-working day on the 31st of December

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply