Cyber Threat Detection Engineer — Hybrid & Growth

Bosch Group; Województwo mazowieckie; Hybrid; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Hybrid work with flexible hours

Referral Bonus Program

Private medical care

Life insurance

Cafeteria system with benefits (MultiS

Prepaid Lunch Card

Job summary

Bosch is seeking a Cyber Threat Detection Analyst/Engineer to strengthen its detection capabilities. The role focuses on CTI analysis, adversary emulation, and rule development to enhance security posture.

Qualified candidates will have strong experience in detection engineering, threat hunting, and offensive security, with proficiency in MITRE ATT&CK, Python, PowerShell, and SQL/KQL. The position offers hybrid work and opportunities for growth in a multinational team.

Qualifications

• Multiple years of experience in detection engineering, content development, threat hunting, or offensive security.
• Deep familiarity with MITRE ATT&CK framework and mapping TTPs to detections.
• Strong scripting and automation skills in Python/PowerShell/Bash.

Responsibilities

• Analyze CTI, attack surfaces, and detection landscape to identify visibility gaps.
• Emulate adversaries and run simulations to validate coverage and improve detections.
• Develop, test, and tune high-fidelity detection rules and preventive controls.
• Collaborate with SOC to streamline alert triage and optimize playbooks.

Skills

MITRE ATT&CK

Python

PowerShell

Bash

KQL

SQL

Splunk SPL

Adversary emulation

Threat hunting

English fluency

Tools

Splunk

KQL

SQL

Job description

Cyber Threat Detection Analyst / Engineer (f/m)

• Full-time

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people’s lives. Our promise to our associates is rock-solid: we enjoy our work, we inspire each other, we provide equal growth opportunities for all team members, all roles are represented in all countries. We grow together!

Visibility & Detection Gap Analysis: Conduct analyses of Cyber Threat Intelligence (CTI), attack surfaces, and the current detection landscape to identify and prioritize visibility and detection gaps.

Adversary Emulation: Perform adversary emulation and simulations to validate and continuously improve detection coverage.

Rule Development & Tuning: Develop, test, and tune high-fidelity detection rules and preventive controls to strengthen the overall security posture.

SOC Collaboration: Collaborate with SOC and incident response teams to streamline alert triage, optimize playbooks, and reduce false positives.

Professional Experience: Multiple years of experience in detection engineering/content development, threat hunting, or offensive security.

Technical Expertise: Deep expertise in the MITRE ATT&CK® framework, from converting hypotheses into MITRE-mapped adversary TTPs to evaluating potential visibility and coverage gaps.

Programming & Automation: Proficient in scripting and automation languages (e.g., Python, PowerShell, Bash) and proven experience in most commonly used query languages (e.g., KQL, SQL, Splunk SPL).

Certifications (Strong Plus): Offensive security certifications (e.g., OSCP, OSEP, CRTO, GXPN, GPEN, GCIH or other relevant GIAC/offensive certifications).

• Threat Intelligence & SOC: Familiarity with or formal training in Cyber Threat Intelligence (CTI) and/or SOC Analyst experience (e.g., Microsoft SC-200) is a strong asset
• Soft Skills & Language: Analytical, structured, and investigative mindset; fluent English is a must (German or other European languages are a plus).

Bosch’s culture of innovation and digital transformation offers you a fantastic platform to grow your skills and enhance your network. We are dedicated to building a warm, open, transparent, and inclusive work environment for all.

• EmploymentContract
• Competitive salary + annual bonus
• Hybrid work with flexible working hours
• Referral Bonus Program
• Copyright costs for IT employees

Grow LikeABosch:

• Complex environment of working, professional support and possibility to share knowledge and best practices
• Ongoing development opportunities in a multinational environment
• Broad access to professional trainings (incl. language courses), conferences and webinars
• Private medical care and life insurance
• Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinematickets, etc.)
• Prepaid Lunch Card
• Number of benefits for families (for instance summer camps for kids)
• Non-working day on the 31st of December

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply