Threat Intelligence Engineer — Automate & Elevate CTI Ops

Here; Kraków; Hybrid; PLN 180,000 - 270,000; Full time

Benefits offered by this job

Petabyte-scale data projects

Cutting-edge technologies

Work-life balance

Flexible working hours

Competitive salary plus bonus

Global, diverse team

Job summary

HERE Technologies is seeking a Threat Intelligence Engineer to join its Cyber Security team in Kraków. You will transform threat intelligence into actionable security outcomes by leveraging TIPs, automation, and adversary tracking, collaborating with SOC, IR, detection engineering, and security operations teams.

You will mature CTI capabilities, improve visibility into emerging threats, and automate intelligence collection, enrichment, and distribution workflows across SIEM, SOAR, and EDR/XDR.

Qualifications

• 3+ years of experience in Cyber Threat Intelligence or related security roles.
• Hands-on with Threat Intelligence Platforms (TIPs) such as MISP/OpenCTI; threat actor tracking.
• Understanding of IOC lifecycle and intelligence-driven defense.
• Experience integrating CTI with SIEM/SOAR/EDR via APIs.

Responsibilities

• Monitor and analyze global threat landscape for threats relevant to the company, industry, assets, and operations.
• Track threat actors, malware campaigns, vulnerabilities, ransomware groups, phishing activity, and attacker TTPs.
• Collect, enrich, correlate, and operationalize IOCs from internal and external sources.
• Operate and maintain Threat Intelligence Platforms (TIPs) and integrations.
• Develop automated workflows for threat ingestion, enrichment, deduplication, scoring, and distribution.
• Integrate threat intelligence into SIEM, SOAR, EDR/XDR, ticketing systems, and detection pipelines via APIs and automation.
• Produce tactical, operational, and strategic intelligence reports for technical and non-technical stakeholders.
• Support Incident Response, Threat Hunting, Detection Engineering, and Purple Team activities with actionable intelligence.
• Conduct malware, infrastructure, and campaign analysis to identify attacker patterns and risks.
• Evaluate new intelligence sources, tools, and technologies to continuously improve CTI capabilities.
• Build dashboards, metrics, and reporting capabilities to measure intelligence effectiveness and threat trends.

Skills

Threat intelligence

SOC

Automation

Python

Bash

IOC lifecycle

MITRE ATT&CK

Tools

MISP

OpenCTI

ThreatConnect

SIEM

Job description

HERE Technologies is seeking a Threat Intelligence Engineer to join its Cyber Security team in Kraków. You will transform threat intelligence into actionable security outcomes by leveraging TIPs, automation, and adversary tracking, collaborating with SOC, IR, detection engineering, and security operations teams.

You will mature CTI capabilities, improve visibility into emerging threats, and automate intelligence collection, enrichment, and distribution workflows across SIEM, SOAR, and EDR/XDR.