Required:Experience in threat intelligence, threat monitoring, or SOC/CTI operations – you have kept watch over real environments and know what a meaningful signal looks likeSolid grounding in the Threat Intelligence Lifecycle and structured analytical techniques, and frameworks such as the Diamond Model, Kill Chain, and MITRE ATT&CKAbility; to produce transparent, accurate analytical products and communicate them to audiences of varying technical depth, with excellent English language skillsHands-on technical ability – Python or scripting, API integrations, and lightweight workflow building; you build tools, not only use themWorking knowledge of detection logic and telemetry – you can read, reason about, and contribute to detection rules and hunting leadsExperience with at least one Threat Intelligence Platform, ideally Google Threat Intelligence / VirusTotal, CrowdStrike Intelligence, or Recorded FutureAn AI-native working style – you integrate LLMs and automation tools into your daily monitoring, enrichment, and analytical workflowComposure under pressure – you deliver clearly and effectively during incidents and time-critical escalationsPreferred:Background in Incident Response, SOC operations, or digital forensicsHands-on detection engineering experience, ideally authoring rules in Google SecOps or CrowdStrikePrior experience in IT administration (server, network, endpoint) – understanding what you are defending at infrastructure levelSANS FOR578 (Cyber Threat Intelligence) or equivalent certificationFamiliarity with threat sharing platforms (MISP) and large-scale IOC managementExperience with SOAR platforms, N8N, or Power AutomateData and Process visualization proficiency (Grafana, advanced Excel, PowerPoint)Certifications: GIAC (GCTI, GCIH, GCFA), CISSP, or OSCPWho You AreA bridge-builder — you are equally comfortable with an analyst’s judgment and an engineer’s toolkit,



and you connect the two without frictionVigilant and curious — you notice what others scroll past, and you follow a faint signal until you know what it meansA builder — you identify gaps and close them without waiting for instructionAutonomous and outcome-driven — you execute decisively, follow guidelines, and report after; action precedes permissionA communicator — you understand that ultimately people execute defenses, and people must understand what you produceEnergized by transformation — an unfinished environment is an opportunity, not a problemProcess-aware without being process-bound — you operate with discipline, can justify your decisions under scrutiny, but never let procedure prevent progressCollaborative across boundaries — in our pooled model, you will work across squads (Monitoring, Intrusion Analysis, TTP & Threat Actor Analysis, IOC Handling) and partner daily with detection engineers and incident respondersExposure in AI ,GenAI and Agentic AI preffered.Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.Great to have you on board. Let's care for tomorrow.

📌 Threat Intelligence Engineer_3377 (Biswanath Charali)
🏢 Allianz
📍 Biswanath Charali