Threat Detection Engineer – MITRE ATT&CK & Automation

Bosch; Warsaw (IN); Híbrido; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work with flexible hours

Annual bonus

Referral bonus program

Private medical care

Descripción de la vacante

Bosch in the United States seeks a Detection Engineering professional to analyze CTI, emulate adversaries, and develop high-fidelity detection rules. You will work with SOC and IR teams to strengthen security posture.

This role requires MITRE ATT&CK expertise, scripting with Python/PowerShell/Bash, and experience with KQL/SQL/Splunk SPL. A strong advantage for offensive security certs and CTI/SOC background; English fluency is essential. Hybrid work and competitive benefits.

Formación

• Multiple years of experience in detection engineering, threat hunting, or offensive security.
• Deep expertise in the MITRE ATT&CK framework and mapping TTPs.
• Proficient in scripting/automation languages (Python, PowerShell, Bash) and query languages (KQL, SQL, Splunk SPL).
• Offensive security certifications (e.g., OSCP, OSEP, CRTO, GXPN, GPEN, GCIH or GIAC) are a strong plus.
• Familiarity with CTI and/or SOC Analyst experience (e.g., Microsoft SC-200) is a strong asset
• Analytical, structured, and investigative mindset; fluent English is a must (German or other European languages are a plus).

Responsabilidades

• Analyze CTI, attack surfaces, and detection gaps to prioritize visibility.
• Conduct adversary emulation and simulations to validate coverage.
• Develop, test, and tune high-fidelity detection rules and preventive controls.
• Collaborate with SOC and incident response to streamline alerts and reduce false positives.

Conocimientos

MITRE ATT&CK

Adversary emulation

Analytical thinking

English fluency

SOC collaboration

Herramientas

Python

PowerShell

Bash

KQL

SQL

Splunk SPL

Descripción del empleo

Bosch in the United States seeks a Detection Engineering professional to analyze CTI, emulate adversaries, and develop high-fidelity detection rules. You will work with SOC and IR teams to strengthen security posture.

This role requires MITRE ATT&CK expertise, scripting with Python/PowerShell/Bash, and experience with KQL/SQL/Splunk SPL. A strong advantage for offensive security certs and CTI/SOC background; English fluency is essential. Hybrid work and competitive benefits.