Threat Intelligence Engineer

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/87imh0

About the Job

You know adversaries by how they operate — and you know how to turn that knowledge into action. As a Threat Intelligence Engineer — Intrusion Analysis & Detection, you will help transform threat actor behavior into concrete defensive value: stronger detections, smarter hunting hypotheses, and intelligence that helps defenders move faster and more effectively.

Within the Allianz Cyber Defense Center (ACDC), you will join a team that is evolving towards an AI-augmented, intelligence-driven operating model. This is a high-impact opportunity to shape and mature intrusion analysis capabilities, automate repetitive intelligence workflows, and directly influence how a global organization defends itself against real-world threats. If you enjoy combining technical depth, analytical thinking, and practical execution, this role will give you the platform to make a visible difference at scale.

What you do
- Analyze real-world attacks, post-incident findings,



and emerging adversary tradecraft to identify relevant threat activity and convert retrospective analysis into forward-looking intelligence.
- Translate threat intelligence into actionable detection content by producing detection rules and analytical guidance for deployment by detection engineering teams across platform-native environments.
- Track threat actors and map tactics, techniques, and procedures to MITRE ATT&CK;, identifying coverage gaps and generating meaningful hunting leads based on relevance to the Allianz environment.
- Build and maintain automation for repetitive intelligence workflows using SOAR platforms, Power Automate, N8N, Python, scripting, and API integrations to improve speed, quality, and consistency.
- Apply AI in daily analytical workflows to categorize incoming intelligence, enrich indicators, correlate reporting with tracked topics, and accelerate decision-making.
- Communicate findings clearly through dashboards, written intelligence notes, and operational briefings so that det

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/87imh0