Cyber Threat Detection Analyst / Engineer (f/m)

At Bosch, we develop high-quality technologies and services with a focus on innovation and digital transformation in a multinational environment.

• Multiple years of experience in detection engineering, content development, threat hunting, or offensive security.
• Deep expertise in the MITRE ATT&CK® framework, including converting hypotheses into MITRE-mapped adversary TTPs and evaluating visibility and coverage gaps.
• Proficient in scripting and automation languages such as Python, PowerShell, and Bash.
• Proven experience with query languages like KQL, SQL, and Splunk SPL.
• Offensive security certifications are a strong plus, including OSCP, OSEP, CRTO, GXPN, GPEN, and GCIH.
• Familiarity or formal training in Cyber Threat Intelligence (CTI) and/or SOC Analyst experience (e.g., Microsoft SC-200) is highly valued.
• Analytical, structured, and investigative mindset.
• Fluent in English; knowledge of German or other European languages is advantageous.

• Conduct analyses of Cyber Threat Intelligence (CTI), attack surfaces, and detection landscape to identify visibility and detection gaps.
• Perform adversary emulation and simulations to validate and improve detection coverage.
• Develop, test, and tune high-fidelity detection rules and preventive controls.
• Collaborate with SOC and incident response teams to streamline alert triage, optimize playbooks, and reduce false positives.