As Hungary’s most attractive employer in 2025 (according to Randstad’s representative survey), Deutsche Telekom IT Solutions is a subsidiary of the Deutsche Telekom Group. The company provides a wide portfolio of IT and telecommunications services with more than 5300 employees. We have hundreds of large customers, corporations in Germany and in other European countries.
Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.
Project Description
As a Senior Cyber Threat Intelligence Analyst, you will identify, analyze, and contextualize threats targeting organizations, critical infrastructure, and digital assets. You will translate intelligence on threat actors, attack campaigns, vulnerabilities, and emerging risks into clear, actionable insights for security operations and strategic decision-makers.
You will join an international threat-hunting environment and work closely with technical experts, management stakeholders, and customer security leaders. This is a customer-facing role for an experienced analyst who combines strong technical depth with confident communication and a proactive, structured mindset.
Tasks:
- Monitor and analyze cyber threats, vulnerabilities, malware campaigns, and threat actor activity.
- Identify and assess Indicators of Compromise (IOCs), Tactics, Techniques and Procedures (TTPs), and emerging attack patterns.
- Collect and correlate intelligence from OSINT, technical telemetry, intelligence feeds, and security advisories.
- Provide actionable threat intelligence and contextual enrichment to SOC and Incident Response teams.
- Create concise intelligence reports, alerts, and briefings for technical and management stakeholders.
- Contribute to threat hunting, detection engineering, and intelligence-led security use cases.
- Continuously improve threat intelligence processes, detection capabilities, and analytical methods.
- Collaborate with internal and external security communities on threat actors, campaigns, and attack techniques.
- Engage regularly with customer stakeholders, including technical teams, management, and CISOs.
· Conduct deep-dive research into threat actor campaigns, tracing their infrastructure, tools, techniques, targeting, and evolution to develop a fuller understanding of the actors and their objectives.
- Use security incidents as starting points for broader investigations, pivoting from observed activity to uncover related indicators, infrastructure, victims, campaigns, and potential links to known or emerging threat actors
Qualifications
Requirements
- Degree in Computer Science, Cyber Security, Information Technology, or a related field.
- 4–5 years of professional experience in Cyber Threat Intelligence, Cyber Defense, SOC, Incident Response, or a related function.
- Strong knowledge of cyber security principles, networking, operating systems, and common attack techniques.
- Hands-on experience with SIEM, EDR/XDR, Threat Intelligence Platforms, and OSINT tools.
- Good understanding of threat intelligence frameworks such as MITRE ATT&CK.
- Ability to analyze and contextualize threat actor activity, IOCs, and attack trends.
- Experience with scripting and automation, ideally Python.
- Strong analytical, communication, presentation, and reporting skills.
- Structured, self-driven working style with close attention to detail.
- Fluent English, written and spoken.
Advantages
- Experience in malware analysis or reverse engineering.
- Experience in Threat Hunting, Detection Engineering, or Digital Forensics.
- Security certifications such as GCTI, GREM, GCFA, OSCP, or comparable credentials.
- German language skills.
- Practical knowledge of tools such as OpenCTI, Censys, urlscan.io, VirusTotal, Passive DNS services, or Spur.
Additional Information
- Supportive colleagues in Hungary and across our international security network.
- Exposure to diverse areas of cyber security and closely related disciplines.
- Opportunities to expand your expertise through training and professional certifications.
- A collaborative environment where your analysis directly supports operational and strategic security decisions.
- Initial onboarding in Bonn for approximately 2–3 days.
— Sarah J.
·
Marketing Manager
★★★★★
Verified
