Cyber Threat Detection Analyst / Engineer

About the role

As a Cyber Threat Detection Analyst/Engineer at Bosch, you will work on identifying visibility and detection gaps, performing adversary emulation, and developing high‑fidelity detection rules to strengthen the security posture. You will collaborate closely with SOC and incident‑response teams to improve detection coverage.

Key responsibilities

• Conduct analyses of Cyber Threat Intelligence, attack surfaces, and current detection landscape to identify and prioritize visibility and detection gaps.
• Perform adversary emulation and simulations to validate and continuously improve detection coverage.
• Develop, test, and tune high‑fidelity detection rules and preventive controls.
• Collaborate with SOC and incident‑response teams to streamline alert triage, optimize playbooks, and reduce false positives.

Required profile

• Multiple years of experience in detection engineering, threat hunting, or offensive security.
• Deep expertise in the MITRE ATT&CK® framework and ability to map hypotheses to adversary TTPs.
• Proficiency in scripting and automation languages such as Python, PowerShell, and Bash, and experience with query languages like KQL, SQL, and Splunk SPL.
• Offensive security certifications (e.g., OSCP, OSEP, GPEN) are a strong plus.
• Familiarity with Cyber Threat Intelligence and SOC analyst processes.
• Analytical, structured mindset with fluent English; additional European languages are a plus.

Required skills

• MITRE ATT&CK framework
• Python
• PowerShell
• Bash
• KQL
• SQL
• Splunk SPL

What we offer

• Competitive salary plus annual bonus
• Hybrid work with flexible working hours
• Referral Bonus Program
• Private medical care and life insurance
• Cafeteria system with benefits such as MultiSport, shopping vouchers, and cinema tickets
• Prepaid lunch card
• Family‑friendly benefits including summer camps for kids
• Non‑working day on 31 December