Senior Cyber Threat Intelligence Engineer (all genders)

THE ROLE & THE TEAM
 

As a Senior Cyber Threat Intelligence Engineer, you will play a critical role in driving our security operations team’s efforts to specialize in proactive threat detection, threat intelligence integration, and enhancing our cybersecurity response capabilities. Your primary responsibility will be to lead our threat hunting efforts, identify emerging threats, and integrate actionable threat intelligence into our detection and response strategies. In this role, you will create advanced detection use cases, develop automated responses, and contribute to both tactical and strategic threat defense measures. Meticulous attention to detail to identify subtle indicators of compromise is key for this role.

This is an on-call role, including shifts from time to time outside business hours and weekends.

INCLUSIVE BY DESIGN
 

At Zalando, our vision is to be inclusive by design. And this vision starts with our hiring - we do not discriminate on the basis of gender identity, sexual orientation, personal expression, ethnicity, religious belief, or disability status. You are welcome to leave out your picture, age, or marital status from your application. We only assess candidates on their qualifications and merit. 

We want to provide you with a great candidate experience. Feel free to inform us of any accommodations you may need, so we can best support you throughout the hiring process. 

do.BETTER - our diversity & inclusion strategy: https://corporate.zalando.com/en/our-impact/dobetter-our-diversity-and-inclusion-strategy
Our employee resource groups: https://corporate.zalando.com/en/our-impact/our-employee-resource-groups 

WHAT WE’D LOVE YOU TO DO (AND LOVE DOING)
 

• Lead proactive threat-hunting activities by developing hypotheses, methodologies, and tools to uncover sophisticated threats that evade traditional detection;

• Integrate and validate threat intelligence from multiple sources into security monitoring tools, ensuring detection rules are continuously updated and optimized for accuracy;

• Collaborate closely with Incident Response teams during the entire Security Incident Lifecycle to ensure rapid containment, mitigation, and recovery of security incidents;

• Conduct digital forensics investigations to analyze and interpret data from security incidents, providing detailed reports and recommendations for remediation and future prevention;

• Detect and prevent fraudulent behaviors as per the OWASP Automated Threats methodology, particularly in areas like Account Takeovers, multi-account misuse, and bot-driven scalping, ensuring legitimate users are protected from automated abuse;

• Provide mentorship and guidance to junior team members, fostering a culture of continuous learning and improvement within the Cyber Threat Intelligence team.

WE’D LOVE TO MEET YOU IF
 

• You have 5+ years of experience in threat hunting or Cyber Security Incident response in a Cyber Defense Team, a CSIRT or SOC;

• You have excellent communication skills, verbal and written, are experienced in writing forensic incident investigation reports, and have a proven track record for dealing with stakeholders;

• You have deep expertise in security monitoring, detection, and analysis methodologies, including XDR, network-based intrusion detection, web application firewalls, and SIEM solutions;

• You have a strong understanding of the MITRE ATT&CK Framework, the Cyber Kill Chain, and NIST, and can apply these to improve threat detection capabilities;

• You have experience with threat intelligence platforms, indicator management, and the integration of intelligence into detection platforms like MISP, OpenCTI or Yeti;

• You have experience with programming/scripting languages to streamline security operations such as Python, GO, PowerShell, Bash;

• You possess experience in AWS/GCP/Azure and Kubernetes security.

If you think you have what it takes, we encourage you to apply even if you don't meet every single requirement. You may just be the right candidate for this or other roles!

OUR OFFER
 

Zalando provides a range of benefits, here’s an overview of what you can expect. Ask your Talent Acquisition Partner to learn more about what we offer.

• Employee shares program

• 40% off fashion and beauty products sold and shipped by Zalando, 30% off Zalando Lounge, discounts from external partners

• 2 paid volunteering days a year

• Hybrid working model with 60% (or more) remote per week, actual practice is up to each team to best support their collaboration

• Work from abroad for up to 30 working days a year

• 27 days of vacation a year to start

• Relocation assistance available (subject to prior agreement)

• Family services, including counseling and support

• Health and wellbeing options (including Gympass)

• Mental health support and coaching available

Learn all about Zalando and our values here: https://jobs.zalando.com/en/?gh_src=22377bdd1us