Cyber Threat Intelligence Engineer — Automate Defenses

Bosch; Warszawa; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Cafeteria benefits

Prepaid lunch card

Flexible working hours

Job summary

Bosch is seeking a Cyber Threat Intelligence Analyst to join a distributed team across Germany and Poland. You will convert intelligence into defensive actions, develop tools, and automate workflows to protect Bosch globally.

You will monitor OSINT sources, track threats, and translate external data into proactive defenses with SOC and engineering teams, while profiling adversaries using MITRE ATT&CK frameworks and delivering timely briefings to leadership.

Qualifications

• Proven experience in Cyber Threat Intelligence, digital forensics, or a highly analytical security role.
• Deep understanding of the threat landscape, networking protocols, and modern cyberattack vectors.
• Hands-on experience with OSINT tools, threat intelligence platforms (TIPs), and navigating darknet marketplaces safely.
• Strong scripting and tool development skills (Python, APIs, Git, Docker) to automate threat intelligence workflows.
• Analytical, “detective” mindset with the ability to connect fragmented data points into a coherent threat picture.
• Excellent communication skills to translate complex technical threats into clear business risks for diverse stakeholders.
• Fluent in English; German is a plus.

Responsibilities

• Monitoring the external landscape using OSINT, commercial threat feeds, dark-web forums, and underground communities to identify emerging threat actors and trends.
• Tracking targeted threats: hunting for indicators of compromise, leaked credentials, exposed infrastructure, or brand impersonation campaigns targeting our organization, supply chain, or industry.
• Preparing proactive defenses: translating external threat data into actionable defense strategies with SOC and engineering teams to update firewall rules, prioritize vulnerability patching, and fine-tune detection mechanisms before an attack occurs.
• Profiling adversaries: analyzing and mapping threat actor tactics, techniques, and procedures using frameworks like MITRE ATT&CK.
• Delivering early warnings and reporting: providing timely, high-fidelity threat briefings and alerts to both technical teams and executive leadership.
• Developing and automating tools: building and improving internal tools for threat analysis, collection, and monitoring with Python, REST APIs, Git, and Docker.

Skills

Cyber Threat Intelligence

Digital forensics

OSINT tools

Threat intel platforms (TIPs)

Python

APIs

Git

Docker

Analytical mindset

Communication

English fluent

Tools

Python

REST APIs

Git

Docker

Job description

Bosch is seeking a Cyber Threat Intelligence Analyst to join a distributed team across Germany and Poland. You will convert intelligence into defensive actions, develop tools, and automate workflows to protect Bosch globally.

You will monitor OSINT sources, track threats, and translate external data into proactive defenses with SOC and engineering teams, while profiling adversaries using MITRE ATT&CK frameworks and delivering timely briefings to leadership.