Experteer Overview As Threat Intelligence Engineer, you transform threat actor behavior into concrete defensive value, shaping detections, hunting hypotheses, and actionable intelligence at scale. You’ll join Allianz Cyber Defense Center to evolve intrusion analysis, automate workflows, and influence defense across a integral organization. You’ll combine technical depth with analytical execution to enable faster, smarter responses. This role offers impact at scale within an AI-augmented, intelligence-driven operating model.Compensaciones / Beneficios
- Analyze real-world attacks, post-incident findings, and adversary tradecraft to derive forward-looking intelligence
- Produce detection content and guidance for deployment by detection engineering teams across platform-native environments
- Map threat actor techniques to MITRE ATTu0026CK and generate hunting leads aligned to Allianz environment
- Automate repetitive intelligence workflows using SOAR platforms, Power Automate, N8N, Python, scripting, and API integrations
- Apply AI to categorize intelligence, enrich indicators, and accelerate decision-making in daily workflows
- Communicate findings via dashboards, intelligence notes, and operational briefings for cross-functional teams




- Support IOC lifecycle and provide analytical input during active security incidents as part of on-call rotationsResponsabilidades
- Hands-on intrusion analysis experience with real-world attack patterns and post-incident evidence
- Ability to turn intelligence into actionable detection through authoring/tuning/validation of production detection rules
- Strong knowledge of MITRE ATTu0026CK, particularly techniques-level telemetry for effective detection
- Practical coding and automation skills (Python, scripting, API-driven workflows) with a builder mindset
- Understanding of Threat Intelligence Lifecycle and models such as the Diamond Model and Kill Chain
- Experience with tools like Google SecOps, CrowdStrike Falcon/Intelligence, Google Threat Intelligence/VirusTotal, Recorded Future, MISP or similar
- Proactive, outcome-driven mindset; ability to stay composed under pressure and collaborate across technical teamsRequisitos principales
- hybrid work model with remote work up to 25 days abroad
- company bonus scheme
- pension
- employee shares program
- digital learning programs
- international career mobility

📌 Threat Intelligence Engineer (Madrid)
🏢 Allianz
📍 Madrid