Threat Intelligence Lead — Cybersecurity & Detection

Bosch; Warszawa; Hybrid; PLN 120,000 - 210,000; Full time

Benefits offered by this job

Hybrid work with flexible hours

Private medical care

Life insurance

Cafeteria benefits

Annual bonus

Job summary

Bosch is seeking a cybersecurity professional to identify, analyze, and track threat actor TTPs and IOCs, supporting threat hunting and detection across Bosch networks. You will collaborate with Incident Response and Detection Engineering to integrate intelligence into operations and deliver high-quality briefings for technical and executive audiences.

The role requires scripting and tool development in Python, REST APIs, Git, and Docker, with strong communication skills and ability to work in a

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• Several years in technical cybersecurity roles (CTI, SOC, Threat Hunting, Incident Response, DFIR).
• Experience tracking adversarial behavior with knowledge of cyber kill chain and MITRE ATT&CK.

Responsibilities

• Identify, analyze, and track threat actor TTPs and IOCs using threat prioritization frameworks.
• Investigate complex threat data to provide situational awareness and strengthen detection and response capabilities.
• Conduct in-depth technical analysis (searching, pivoting, enrichment) to support Threat Hunting and identify intrusions.

Skills

Threat hunting

Python scripting

MITRE ATT&CK

Communication

Team collaboration

Education

Bachelor's degree in Computer Science/Cybersecurity

Tools

Git

Docker

REST APIs

Job description

Bosch is seeking a cybersecurity professional to identify, analyze, and track threat actor TTPs and IOCs, supporting threat hunting and detection across Bosch networks. You will collaborate with Incident Response and Detection Engineering to integrate intelligence into operations and deliver high-quality briefings for technical and executive audiences.

The role requires scripting and tool development in Python, REST APIs, Git, and Docker, with strong communication skills and ability to work in a