Senior Cyber Threat Intelligence (CTI) Engineer (f/m)

At Bosch, we shape the future by inventing high-quality technologies and services. The team is distributed across Germany and Poland, with the Polish hub steadily growing. It consists of diverse experts including CTI analysts and tech specialists, leveraging various intelligence sources such as OSINT and specialized feeds, and incorporating AI solutions into daily operations.

• Proven experience in Cyber Threat Intelligence (CTI), digital forensics, or highly analytical security roles.
• Deep understanding of the threat landscape, networking protocols, and modern cyberattack vectors.
• Hands-on experience with OSINT tools, threat intelligence platforms (TIPs), and safe navigation of darknet marketplaces.
• Strong scripting and tool development skills in Python, APIs, Git, and Docker for automating threat intelligence workflows.
• Analytical mindset capable of connecting fragmented data into coherent threat pictures.
• Excellent communication skills to translate technical threats into clear business risks for diverse stakeholders.
• Fluent in English; German language skills are a plus.

• Monitor global threat landscape using Open Source Intelligence (OSINT), commercial threat feeds, Dark Web forums, and underground communities.
• Hunt for indicators of compromise (IoCs), leaked credentials, exposed infrastructure, or brand impersonation campaigns targeting the organization, supply chain, or industry.
• Translate external threat data into defense strategies, coordinating with SOC and engineering teams to update firewall rules, prioritize patching, and tune detection mechanisms proactively.
• Analyze and map threat actor tactics, techniques, and procedures (TTPs) using frameworks like MITRE ATT&CK.
• Provide timely, high-fidelity threat briefings and alerts to technical teams and executive leadership.
• Develop and automate internal tools for threat analysis, collection, and monitoring using Python, REST APIs, Git, and Docker.