Senior Cybersecurity Expert (Threat Intelligence) Job at Robert Bosch Sp. z o.o. (Warszawa)

Senior Cybersecurity Expert

At Bosch, we shape the future by inventing high-quality technologies and service...

Location

Poland , Warszawa

Salary:

Not provided

Robert Bosch Sp. z o.o.

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Cybersecurity, or a related field
Several years of experience in a technical cybersecurity role (e.g., CTI, SOC, Threat Hunting, Incident Response, DFIR)
Proven expertise in tracking and analyzing adversarial behavior, with strong knowledge of the cyber kill chain and MITRE ATT&CK framework
Ability to work methodically and independently while being an effective and reliable team player in a distributed team
Excellent communication skills with the ability to translate complex technical findings for diverse stakeholders
Strong scripting and tool development experience (Python, APIs, Git, Docker)
Fluent in English
German is a plus.

Job Responsibility

Identify, analyze, and track threat actor TTPs and IOCs using threat prioritization frameworks and threat landscape monitoring
Investigate complex threat data to provide situational awareness, quantify trends, support ongoing investigations, and strengthen detection and response capabilities
Conduct in-depth technical analysis (searching, pivoting, enrichment) to support Threat Hunting and identify potential intrusions in Bosch networks and systems
Collaborate closely with cross-functional teams including Incident Response and Detection Engineering to integrate intelligence into detection and response workflows
Produce and deliver high-quality intelligence reports, briefings, and presentations tailored to technical, business, and executive audiences
Respond to Requests for Information (RFIs) and brief stakeholders on emerging campaigns and significant incidents
Develop and improve internal tools for threat analysis and monitoring (using Python, REST APIs, Git, Docker).

What we offer

Competitive salary + annual bonus
Hybrid work with flexible working hours
Referral Bonus Program
Copyright costs for IT employees
Complex environment of working, professional support and possibility to share knowledge and best practices
Ongoing development opportunities in a multinational environment
Broad access to professional trainings (incl. language courses), conferences and webinars
Private medical care and life insurance
Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinema tickets, etc.)
Prepaid Lunch Card

Fulltime

Senior Cybersecurity Expert

Senior Cybersecurity Expert (Threat Intelligence) position at Bosch focusing on ...

Location

Poland , Warszawa

Salary:

Not provided

Robert Bosch Sp. z o.o.

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Cybersecurity, or a related field
Several years of experience in a technical cybersecurity role (e.g., CTI, SOC, Threat Hunting, Incident Response, DFIR)
Proven expertise in tracking and analyzing adversarial behavior, with strong knowledge of the cyber kill chain and MITRE ATT&CK framework
Ability to work methodically and independently while being an effective and reliable team player in a distributed team
Excellent communication skills with the ability to translate complex technical findings for diverse stakeholders
Strong scripting and tool development experience (Python, APIs, Git, Docker)
Fluent in English

Job Responsibility

Identify, analyze, and track threat actor TTPs and IOCs using threat prioritization frameworks and threat landscape monitoring
Investigate complex threat data to provide situational awareness, quantify trends, support ongoing investigations, and strengthen detection and response capabilities
Conduct in-depth technical analysis (searching, pivoting, enrichment) to support Threat Hunting and identify potential intrusions in Bosch networks and systems
Collaborate closely with cross-functional teams including Incident Response and Detection Engineering to integrate intelligence into detection and response workflows
Produce and deliver high-quality intelligence reports, briefings, and presentations tailored to technical, business, and executive audiences
Respond to Requests for Information (RFIs) and brief stakeholders on emerging campaigns and significant incidents
Develop and improve internal tools for threat analysis and monitoring (using Python, REST APIs, Git, Docker)

What we offer

Annual bonus
Hybrid work with flexible working hours
Referral Bonus Program
Copyright costs for IT employees
Professional support and possibility to share knowledge and best practices
Ongoing development opportunities in a multinational environment
Broad access to professional trainings (incl. language courses), conferences and webinars
Private medical care and life insurance
Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinema tickets, etc.)
Prepaid Lunch Card

Fulltime

Senior Cybersecurity Analyst, Threat Hunter

Our cybersecurity and information security teams at IDEXX contribute to a more r...

Location

United States , Westbrook, Maine

Salary:

120000.00 - 140000.00 USD / Year

IDEXX

Expiration Date

Until further notice

Requirements

6–10 years of experience in cybersecurity roles
Minimum of 3 years dedicated specifically to threat hunting or advanced incident response
Bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related field
Preferred certifications GCIH (GIAC Certified Incident Handler) and CompTIA CySA+ (Cybersecurity Analyst+) certification
Proven, hands-on experience using platform for EDR (Endpoint Detection and Response) and threat hunting
Expert-level knowledge of PowerShell Scripting, Python and EDR and SIEM query language is preferred
Deep understanding of incident response lifecycles, methodologies, and forensic techniques
Strong knowledge of networking protocols, operating systems (Windows, Linux, macOS), and common attack vectors
Familiarity with scripting languages (e.g., Python, PowerShell) for automation of hunting tasks is a plus
Exceptional analytical and problem-solving skills with keen attention to detail

Job Responsibility

Proactively hunt for indicators of compromise (IOCs) and advanced persistent threats (APTs) across the network, endpoints, and cloud environments using threat intelligence and a hypothesis-driven methodology
Conduct in-depth analysis of security events, network traffic, and endpoint data to identify malicious activity and potential breaches
Utilize the SIEM and EDR platform extensively, applying expert knowledge of the scripting, SIEM and EDR query language to perform complex searches and data analysis
Lead and participate in incident response activities, including containment, eradication, and recovery efforts, serving as a primary escalation point for critical security incidents
Develop and refine threat hunting playbooks, procedures, and detection rules to improve the security team’s efficiency and effectiveness
Collaborate with the security engineering and security operations center (SOC) teams to integrate new threat intelligence and enhance existing security tools and controls
Mentor junior analysts and contribute to the ongoing improvement of the organization's overall security posture

What we offer

Opportunity for annual cash bonus
Health / Dental / Vision Benefits Day-One
5% matching 401k
Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching

Fulltime

Red Team Operations Manager

To lead, oversee, and quality assure the execution of Red Team engagements end-t...

Location

United Kingdom

Salary:

Not provided

Bugcrowd

Expiration Date

Until further notice

Requirements

Extensive experience leading and/or managing Red Team engagements in enterprise environments, preferably across multiple industries (e.g. finance, critical infrastructure, cloud / SaaS / OT)
Deep technical knowledge of exploitation, post-exploitation, lateral movement, persistence, command & control, evasion, privilege escalation
Good knowledge and experience with Blue Team controls e.g. IDS/IPS, SIEM, EDR, NGFW, log analysis, detection engineering, ideally experience in bypassing or evading them safely
Solid experience with modern cloud environments (Azure, AWS, GCP), hybrid / on-premise networks, potentially OT/IoT/industrial environments
Strong tradecraft / OpSec awareness around how to avoid detection and conduct operations with minimal operational risk
Familiarity with CREST / STAR / TIBER etc. and regulatory / compliance requirements in relevant geographies
Proven experience in threat intelligence ingestion, scenario design, mapping to relevant threat actors
Excellent written and verbal communication skills and able to produce high quality reports, executive summaries, interact with senior leadership, legal, compliance etc.
Good project / operations management skills with an eye for budgeting, scheduling, resource allocation, interfacing external/internal teams
Ability to make real-time decisions under pressure, to balance risk vs reward

Job Responsibility

Lead, oversee, and quality assure the execution of Red Team engagements end-to-end from scoping & planning, through execution, reporting, to debrief and capability development
Ensure that all operations are safe, legal, technically robust, aligned with threat intelligence, compliance frameworks, and deliver high value to customers
Act as a subject-matter expert and manager for both operations and sales / client-facing aspects of Red Team services
Lead multiple concurrent Red Team engagements across industries
Define, negotiate and document scope, objectives, rules of engagement, deliverables, constraints, escalation & approval pathways
Oversee milestone planning e.g. kick-offs, stand-ups, wash-ups, strategic debriefs
Manage resources e.g. operator assignments, tooling, support functions
Track engagement progress vs objectives, adjust as needed
Assess and manage technical risk ensuring that any red team activity minimises risk to customer operations, data, systems
Real-time decision making during operations around TTP deployment, bypass of defenses, managing detections or unexpected discovery

Red Team Operations Manager

To lead, oversee, and quality assure the execution of Red Team engagements end-t...

Location

Australia

Salary:

Not provided

Bugcrowd

Expiration Date

Until further notice

Requirements

Extensive experience leading and/or managing Red Team engagements in enterprise environments, preferably across multiple industries (e.g. finance, critical infrastructure, cloud / SaaS / OT)
Deep technical knowledge of exploitation, post-exploitation, lateral movement, persistence, command & control, evasion, privilege escalation
Good knowledge and experience with Blue Team controls e.g. IDS/IPS, SIEM, EDR, NGFW, log analysis, detection engineering, ideally experience in bypassing or evading them safely
Solid experience with modern cloud environments (Azure, AWS, GCP), hybrid / on-premise networks, potentially OT/IoT/industrial environments
Strong tradecraft / OpSec awareness around how to avoid detection and conduct operations with minimal operational risk
Familiarity with CREST / STAR / TIBER etc. and regulatory / compliance requirements in relevant geographies
Proven experience in threat intelligence ingestion, scenario design, mapping to relevant threat actors
Excellent written and verbal communication skills and able to produce high quality reports, executive summaries, interact with senior leadership, legal, compliance etc.
Good project / operations management skills with an eye for budgeting, scheduling, resource allocation, interfacing external/internal teams
Ability to make real-time decisions under pressure, to balance risk vs reward

Job Responsibility

Lead multiple concurrent Red Team engagements across industries
Define, negotiate and document scope, objectives, rules of engagement, deliverables, constraints, escalation & approval pathways
Oversee milestone planning e.g. kick-offs, stand-ups, wash-ups, strategic debriefs
Manage resources e.g. operator assignments, tooling, support functions
Track engagement progress vs objectives, adjust as needed
Assess and manage technical risk ensuring that any red team activity minimises risk to customer operations, data, systems
Real-time decision making during operations around TTP deployment, bypass of defenses, managing detections or unexpected discovery
Review and approve attack plans, threat modelling, intelligence
Ensure operators employ strong operational security (OpSec), safe tradecraft, evidence collection, clean up post-engagement
Maintain up-to-date knowledge of Red Team tools, adversary TTPs, defensive controls, detection systems

New

Senior Security Research Engineer

Microsoft Defender Experts Team is looking for an experienced professional to jo...

Location

Costa Rica , San José

Salary:

Not provided

Microsoft Corporation

Expiration Date

Until further notice

Requirements

Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field
Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
equivalent experience
Over 7 years of hands‑on experience in technical cybersecurity roles—including Security Operations, Threat Intelligence, Incident Response, and Penetration Testing/Red Team
Advanced English level
Advanced Portuguese level

Job Responsibility

Work directly with senior leaders of our customers’ security organizations as design partners on new cloud detection and response innovations, as well as to ensure excellent customer satisfaction with our products and services
Partner with your team of Microsoft Threat Experts providing deep research and analysis of threats impacting our customers
Work cross-functionally with engineering, marketing, and business leaders to innovate and deliver new security service offerings at a global scale
Investigate, analyze, and learn from security researchers, attackers, and real incidents to develop durable detection solutions/strategies across customer tools
Work with other internal and external teams to forge new and improve existing partnerships that help mature the products that support Defender Experts service offerings
Provide technical leadership in a challenging and rewarding environment and influence the organization

Fulltime

New

Secops Lead

Serves as the Lead Cybersecurity Operations (SECOPS) contractor, providing senio...

Location

United States , Washington, DC

Salary:

Not provided

AAC

Expiration Date

Until further notice

Requirements

Demonstrated ability to guide technical discussions and provide expert advisory support to senior government officials, including the CISO, system owners, SOC staff, and executive leadership, while operating under government direction
Proven experience as a SOC Lead or Senior Team Lead, successfully coordinating with managed security service providers (MSSPs) and external cybersecurity partners (e.g., CISA, CYBERCOM) in support of incident response (IR), incident handling (IH), and vulnerability management (VM) activities), including mitigating actions to contain activity and facilitating forensics analysis when necessary
Documented experience conducting and guiding in-depth technical evaluations of INFOSEC, IT security, and cybersecurity tactics, techniques, and procedures (TTPs), including their impact on baseline system configurations
Demonstrated proficiency providing cybersecurity posture assessments, hygiene reporting, and technical input in support of Governance, Risk, and Compliance (GRC) activities and continuous monitoring programs
Experience providing incident response support to network subscribers, including recommending mitigating actions, supporting containment efforts, and facilitating forensic analysis under government oversight
Demonstrated expertise in log-based and endpoint-based threat detection, threat hunting, and analysis across multiple threat sources
Strong technical knowledge of web services security, Microsoft cloud environments (Azure, M365), and modern enterprise security architectures
Advanced experience evaluating the security of complex web portals, APIs, and databases (e.g., Java, Ruby, SQL, Oracle) using commercial and open-source security assessment tools such as SQLmap and mongoaudit
Near-expert proficiency in: Web application security testing frameworks (e.g., NMAP, W3af)
Continuous monitoring and remediation tools (e.g., Azure Security Center, Defender for Cloud, Qualys, Wireshark)

Job Responsibility

Serves as the Lead Cybersecurity Operations (SECOPS) contractor, providing senior-level technical leadership and operational support to the Agency’s IT Security Program
Supports and coordinates SECOPS activities under government direction and maintains technical inputs to the Agency’s IT Security Program
Provides senior technical advisory support to the Chief Information Security Officer (CISO) on developments in cybersecurity, information security (INFOSEC), and IT security, including emerging threat vectors, advanced persistent threats (APTs), attack surface analysis, and identified weaknesses
Supports Agency-level technical implementation of approved cybersecurity policies, standards, and directives by developing technical documentation, implementation guidance, and draft procedures for government review and approval
Leads day-to-day contractor cybersecurity operations activities within the SECOPS function, supporting government-led oversight of systems and services that impact the Agency’s mission and critical infrastructure
Implements and administers cybersecurity incident handling (IH) and incident response (IR) capabilities, including SIEM dashboards, detection inputs, incident response playbooks, and operational metrics, to improve efficiency and effectiveness of security operations
Facilitates and coordinates SECOPS activities in support of the Agency’s Information Security (INFOSEC) Program, assisting Agency system security personnel and Information System Security Officers (ISSOs)
Serves as the senior technical advisor for threat, vulnerability, and configuration management activities, providing threat intelligence analysis, mitigation recommendations, and defensive strategy insights to Agency stakeholders

Fulltime

Senior Detection and Response Engineer

The Senior Detection and Response Engineer is a critical technical role responsi...

Location

United States

Salary:

128000.00 - 161000.00 USD / Year

AlphaSense

Expiration Date

Until further notice

Requirements

7+ years in security operations with 3+ years in detection engineering, including deep expertise in creating high-fidelity rules (SIGMA, YARA-L, KQL, SPL)
Proven track record of building detection strategies across SIEM, EDR, and Cloud platforms, grounded in the MITRE ATT&CK framework
Expert knowledge of SOAR platforms (e.g., Tines, Splunk SOAR, Cortex XSOAR), architecture, and complex playbook development
Proven experience designing and implementing SOAR platform architecture from concept to production
Advanced scripting and automation development skills in Python (required) for API integrations and security tool orchestration
Strong background in threat hunting methodology, hypothesis development, and campaign execution, with experience leading or co-leading hunting programs
Proficiency with data analysis, anomaly detection, and hands-on experience with hunting tools like Jupyter Notebooks, Osquery, and Velociraptor
Deep understanding of attack techniques, lateral movement, persistence mechanisms, and post-exploitation TTPs across Windows, Linux, and macOS
Familiarity with security frameworks including MITRE ATT&CK, PICERL, NIST CSF, and Detection Maturity Models, and incident response best practices
Proven ability to lead technical initiatives, mentor team members, and communicate complex technical concepts to diverse audiences

Job Responsibility

Design, implement, and maintain advanced detection rules and correlation logic across SIEM , EDR, and Cloud platforms (AWS, GCP)
Lead detection strategy and architecture aligned with the Detection Quality frameworks
Write high-fidelity detection rules using languages like SIGMA and YARA-L
Conduct deep log source analysis, perform threat modeling, adversary emulation, and maintain MITRE ATT&CK mapping coverage
Conduct detection gap analysis to identify coverage opportunities across the kill chain
Create and maintain detection playbooks, runbooks, and comprehensive documentation
Perform detection quality assessments and continuous improvement initiatives
Develop complex automated response playbooks for multi-stage incidents spanning multiple security tools
Integrate security tools via APIs (SIEM, EDR, MDM, CASB, ITSM, threat intelligence platforms)
Create automated enrichment pipelines incorporating threat intelligence, asset context, and user behavior analytics

What we offer

performance-based bonus
equity
a generous benefits program

Fulltime

Senior Cybersecurity Expert (Threat Intelligence)

Robert Bosch Sp. z o.o.

Location:
Poland , Warszawa

Category:
IT - Software Development

Contract Type:
Employment contract

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
July 18, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Cybersecurity Expert (Threat Intelligence)

Senior Cybersecurity Expert

Senior Cybersecurity Expert

Senior Cybersecurity Analyst, Threat Hunter

Red Team Operations Manager

Red Team Operations Manager

Senior Security Research Engineer

Secops Lead

Senior Detection and Response Engineer

Senior Cybersecurity Expert (Threat Intelligence)

Robert Bosch Sp. z o.o.

Location:Poland , Warszawa

Category:IT - Software Development

Contract Type:Employment contract

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:July 18, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Cybersecurity Expert (Threat Intelligence)

Senior Cybersecurity Expert

Senior Cybersecurity Expert

Senior Cybersecurity Analyst, Threat Hunter

Red Team Operations Manager

Red Team Operations Manager

Senior Security Research Engineer

Secops Lead

Senior Detection and Response Engineer

Location:
Poland , Warszawa

Category:
IT - Software Development

Contract Type:
Employment contract

Job Posted:
July 18, 2025