About the Job

Every day, the Threat Intelligence Cluster at the Allianz Cyber Defense Center (ACDC) turns the global threat landscape into decisions that protect over 100 million customers. A well-crafted briefing here doesn't just inform — it shifts priorities, unlocks resources, and shapes the security posture of one of the world's largest financial groups. We're repositioning ACDC toward an AI-augmented, intelligence-driven operation, and that's exactly why this role was created.

As our Strategic Threat Intelligence Analyst, you will help translate complex cyber threats into clear and actionable insights for decision-makers and senior leadership. Working across our Intrusion Analysis, TTP & Threat Actor Analysis, and IOC Handling squads, your delivery will define how Allianz reads, prioritizes, and responds to the threats that matter most — from technical defenders all the way to the boardroom.

What you do

Produce strategic intelligence products end-to-end — from daily threat articles and situation reports to quarterly publications and board-level briefings, all in executive-ready language.
Translate complexity into clarity — take intrusion findings, threat actor campaigns, and vulnerability intelligence and make them actionable for technical defenders, IT administrators, and C-suite leadership.
Contribute analytical rigor to regular threat assessments informed by intrusion analysis, external reporting, and intelligence-sharing communities.
Shape and formalize cluster-wide processes — structure workflows, align squads, and ensure our operations are auditable, repeatable, and scalable.
Gather and prioritize intelligence requirements across Allianz Group entities, ensuring our products answer the right questions at the right time.
Drive AI-assisted report production — push our model toward AI-drafted outputs with human editorial oversight, leveraging LLMs for refinement, categorization, and intelligent topic matching.
Set the visual and editorial standard — deliver presentations and publications at top-tier consultancy quality, aligned with ACDC branding and Allianz corporate identity.

What you bring

Proven experience producing management-ready threat intelligence reports, with excellent written and spoken English and a track record of engaging senior management in an international corporate environment.
A well-formed understanding of what constitutes a threat landscape and how to communicate it effectively to audiences of varying technical depth.
Solid grounding in the Threat Intelligence Lifecycle, structured analytical techniques (e.g., ACH), and frameworks such as the Diamond Model, Cyber Kill Chain, and MITRE ATT&CK.
Hands-on experience with at least one Threat Intelligence Platform — ideally Google Threat Intelligence / VirusTotal, CrowdStrike Intelligence, or Recorded Future; familiarity with MISP and structured IOC workflows is a plus.
An AI-native working style — you actively integrate LLMs and automation tools into your daily output, with functional scripting ability (API calls, lightweight workflows in Power Automate, n8n, or Google SecOps SOAR).
A diplomatically effective communicator and outcome-driven operator — composed under pressure, comfortable with on-call rotations during incidents, and energized by building capability in an ambiguous, transforming environment.
Nice to have: background in technology consulting, strategic advisory, or incident response, and certifications such as SANS FOR578 / GCTI, CISSP, or CISM.

What we offer

We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.

About Allianz Technology

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform and innovate the infrastructure, applications and services together with Allianz companies to co-create the best customer experience.

We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction.

In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Find us at: www.linkedin.com/company/allianz-technology.

Commitment to Integrity, Fairness & Inclusion

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

We at Allianz believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations.

To Recruitment Agencies

Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters.

When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.

2 Jobs im Bereich Misp in Spanien

Threat Intelligence Engineer

Strategic Threat Intelligence Analyst