[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-threat-intelligence-engineer3377-allianz-insurance-de-in":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":12,"featured_until":7,"is_active":13,"deactivated_at":7,"is_enriched":13,"processed_job_posting_json":14,"processed_latitude":93,"processed_longitude":94,"processed_employment_types":95,"processed_working_hours":96,"processed_working_hours_labels":98,"processed_home_office":99,"processed_salary_min":90,"processed_salary_max":91,"processed_salary_currency":87,"processed_salary_source":100,"processed_benefits":101,"processed_benefits_labels":102,"processed_industry":103,"processed_skills":7,"processed_job_location":104,"processed_full_address_gmaps":107,"processed_street_gmaps":108,"processed_city_gmaps":109,"processed_postal_code_gmaps":110,"processed_country_gmaps":112,"processed_country_iso_code_gmaps":114,"full_description":17,"formatted_description":115,"processed_employment_types_labels":41,"processed_home_office_labels":39,"processed_industry_labels":43,"processed_it_skills":116,"processed_it_skills_labels":119,"processed_soft_skills":120,"processed_soft_skills_labels":122,"processed_job_expertise_skills":123,"processed_job_expertise_skills_labels":124,"processed_language_requirements":125,"processed_total_experience_years":118,"processed_professional_field":132,"processed_professional_field_labels":135,"processed_leadership_role":12,"processed_date_posted":20,"raw_job_url":136,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":103,"canonical_industry_label":43,"max_cpc":137,"actual_cpc":7},91143,"threat-intelligence-engineer3377-allianz-insurance","Threat Intelligence Engineer_3377",null,{"name":9,"slug":10,"logo_url":11},"Allianz Insurance","allianz-insurance","https:\u002F\u002Fcdn.phenompeople.com\u002FCareerConnectResources\u002FAISAIPGB\u002Fimages\u002FHeader-1706868786965.svg",false,true,{"@context":15,"@type":16,"title":6,"description":17,"hiringOrganization":18,"datePosted":20,"validThrough":21,"jobLocation":22,"jobLocationType":39,"employmentType":40,"industry":42,"skills":44,"baseSalary":85},"https:\u002F\u002Fschema.org\u002F","JobPosting","\u003Cp>\u003Cstrong>Required:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cul type=\"disc\">\u003Cli>Experience in threat intelligence, threat monitoring, or SOC\u002FCTI operations – you have kept watch over real environments and know what a meaningful signal looks like\u003C\u002Fli>\u003Cli>Solid grounding in the Threat Intelligence Lifecycle and structured analytical techniques, and frameworks such as the Diamond Model, Kill Chain, and MITRE ATT&CK\u003C\u002Fli>\u003Cli>Ability to produce clear, accurate analytical products and communicate them to audiences of varying technical depth, with excellent English language skills\u003C\u002Fli>\u003Cli>Hands-on technical ability – Python or scripting, API integrations, and lightweight workflow building; you build tools, not only use them\u003C\u002Fli>\u003Cli>Working knowledge of detection logic and telemetry – you can read, reason about, and contribute to detection rules and hunting leads\u003C\u002Fli>\u003Cli>Experience with at least one Threat Intelligence Platform, ideally Google Threat Intelligence \u002F VirusTotal, CrowdStrike Intelligence, or Recorded Future\u003C\u002Fli>\u003Cli>An AI-native working style – you integrate LLMs and automation tools into your daily monitoring, enrichment, and analytical workflow\u003C\u002Fli>\u003Cli>Composure under pressure – you deliver clearly and effectively during incidents and time-critical escalations\u003C\u002Fli>\u003C\u002Ful>\u003Cp>\u003Cstrong>Preferred:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cul type=\"disc\">\u003Cli>Background in Incident Response, SOC operations, or digital forensics\u003C\u002Fli>\u003Cli>Hands-on detection engineering experience, ideally authoring rules in Google SecOps or CrowdStrike\u003C\u002Fli>\u003Cli>Prior experience in IT administration (server, network, endpoint) – understanding what you are defending at infrastructure level\u003C\u002Fli>\u003Cli>SANS FOR578 (Cyber Threat Intelligence) or equivalent certification\u003C\u002Fli>\u003Cli>Familiarity with threat sharing platforms (MISP) and large-scale IOC management\u003C\u002Fli>\u003Cli>Experience with SOAR platforms, N8N, or Power Automate\u003C\u002Fli>\u003Cli>Data and Process visualization proficiency (Grafana, advanced Excel, PowerPoint)\u003C\u002Fli>\u003Cli>Certifications: GIAC (GCTI, GCIH, GCFA), CISSP, or OSCP\u003C\u002Fli>\u003C\u002Ful>\u003Cdiv align=\"center\">\u003Chr align=\"center\" size=\"2\" width=\"100%\">\u003C\u002Fdiv>\u003Cp>\u003Cstrong>Who You Are\u003C\u002Fstrong>\u003C\u002Fp>\u003Cul type=\"disc\">\u003Cli>\u003Cstrong>A bridge-builder\u003C\u002Fstrong> — you are equally comfortable with an analyst’s judgment and an engineer’s toolkit, and you connect the two without friction\u003C\u002Fli>\u003Cli>\u003Cstrong>Vigilant and curious\u003C\u002Fstrong> — you notice what others scroll past, and you follow a faint signal until you know what it means\u003C\u002Fli>\u003Cli>\u003Cstrong>A builder\u003C\u002Fstrong> — you identify gaps and close them without waiting for instruction\u003C\u002Fli>\u003Cli>\u003Cstrong>Autonomous and outcome-driven\u003C\u002Fstrong> — you execute decisively, follow guidelines, and report after; action precedes permission\u003C\u002Fli>\u003Cli>\u003Cstrong>A communicator\u003C\u002Fstrong> — you understand that ultimately people execute defenses, and people must understand what you produce\u003C\u002Fli>\u003Cli>\u003Cstrong>Energized by transformation\u003C\u002Fstrong> — an unfinished environment is an opportunity, not a problem\u003C\u002Fli>\u003Cli>\u003Cstrong>Process-aware without being process-bound\u003C\u002Fstrong> — you operate with discipline, can justify your decisions under scrutiny, but never let procedure prevent progress\u003C\u002Fli>\u003Cli>\u003Cstrong>Collaborative across boundaries\u003C\u002Fstrong> — in our pooled model, you will work across squads (Monitoring, Intrusion Analysis, TTP & Threat Actor Analysis, IOC Handling) and partner daily with detection engineers and incident responders\u003C\u002Fli>\u003Cli>Exposure in AI ,GenAI and Agentic AI preffered.\u003C\u002Fli>\u003C\u002Ful> \u003Cp>Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust. \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>Great to have you on board\u003Cstrong>.\u003C\u002Fstrong> \u003Cstrong>Let's care for tomorrow.\u003C\u002Fstrong>\u003C\u002Fp>",{"@type":19,"name":9},"Organization","2026-10-27","2027-10-27",[23,33],{"@type":24,"address":25,"geo":29},"Place",{"@type":26,"addressLocality":27,"addressCountry":28},"PostalAddress","PUNE","IN",{"@type":30,"latitude":31,"longitude":32},"GeoCoordinates",18.51957,73.85535,{"@type":24,"address":34,"geo":36},{"@type":26,"addressLocality":35,"addressCountry":28},"Trivandrum",{"@type":30,"latitude":37,"longitude":38},8.58298,76.88819,"HYBRID",[41],"PERMANENT",[43],"Insurance",[45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],"Python","API integrations","Google Threat Intelligence \u002F VirusTotal","CrowdStrike Intelligence","Recorded Future","LLMs","Automation tools","MISP","SOAR platforms","N8N","Power Automate","Grafana","Advanced Excel","PowerPoint","Communication","Composure under pressure","Bridge-building","Vigilance","Curiosity","Proactiveness","Autonomy","Outcome-driven","Collaboration","Process awareness","Threat Intelligence","Threat Monitoring","SOC\u002FCTI Operations","Threat Intelligence Lifecycle","Structured Analytical Techniques","Diamond Model","Kill Chain","MITRE ATT&CK","Detection Logic","Telemetry Analysis","Incident Response","Digital Forensics","Detection Engineering","IT Administration","Threat Sharing Platforms","IOC Management",{"@type":86,"currency":87,"value":88},"MonetaryAmount","EUR",{"@type":89,"minValue":90,"maxValue":91,"unitText":92},"QuantitativeValue",60000,90000,"YEAR",[31,37],[32,38],"permanent",[97],"FULL_TIME",[97],"hybrid","estimated",[],[],"insurance",[105,106],"allianz, pune, india","allianz, 695581, trivandrum, india",[],[],[27,35],[111],"695581",[113],"India",[28],"**Required:**\n\n- Experience in threat intelligence, threat monitoring, or SOC\u002FCTI operations – you have kept watch over real environments and know what a meaningful signal looks like\n- Solid grounding in the Threat Intelligence Lifecycle and structured analytical techniques, and frameworks such as the Diamond Model, Kill Chain, and MITRE ATT&CK\n- Ability to produce clear, accurate analytical products and communicate them to audiences of varying technical depth, with excellent English language skills\n- Hands-on technical ability – Python or scripting, API integrations, and lightweight workflow building; you build tools, not only use them\n- Working knowledge of detection logic and telemetry – you can read, reason about, and contribute to detection rules and hunting leads\n- Experience with at least one Threat Intelligence Platform, ideally Google Threat Intelligence \u002F VirusTotal, CrowdStrike Intelligence, or Recorded Future\n- An AI-native working style – you integrate LLMs and automation tools into your daily monitoring, enrichment, and analytical workflow\n- Composure under pressure – you deliver clearly and effectively during incidents and time-critical escalations\n\n**Preferred:**\n\n- Background in Incident Response, SOC operations, or digital forensics\n- Hands-on detection engineering experience, ideally authoring rules in Google SecOps or CrowdStrike\n- Prior experience in IT administration (server, network, endpoint) – understanding what you are defending at infrastructure level\n- SANS FOR578 (Cyber Threat Intelligence) or equivalent certification\n- Familiarity with threat sharing platforms (MISP) and large-scale IOC management\n- Experience with SOAR platforms, N8N, or Power Automate\n- Data and Process visualization proficiency (Grafana, advanced Excel, PowerPoint)\n- Certifications: GIAC (GCTI, GCIH, GCFA), CISSP, or OSCP\n\n---\n\n**Who You Are**\n\n- **A bridge-builder** — you are equally comfortable with an analyst’s judgment and an engineer’s toolkit, and you connect the two without friction\n- **Vigilant and curious** — you notice what others scroll past, and you follow a faint signal until you know what it means\n- **A builder** — you identify gaps and close them without waiting for instruction\n- **Autonomous and outcome-driven** — you execute decisively, follow guidelines, and report after; action precedes permission\n- **A communicator** — you understand that ultimately people execute defenses, and people must understand what you produce\n- **Energized by transformation** — an unfinished environment is an opportunity, not a problem\n- **Process-aware without being process-bound** — you operate with discipline, can justify your decisions under scrutiny, but never let procedure prevent progress\n- **Collaborative across boundaries** — in our pooled model, you will work across squads (Monitoring, Intrusion Analysis, TTP & Threat Actor Analysis, IOC Handling) and partner daily with detection engineers and incident responders\n- Exposure in AI ,GenAI and Agentic AI preffered.\n\nAllianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.\n\nAt Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.\n\nWe therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.\n\nGreat to have you on board**. Let's care for tomorrow.**",{"n8n":117,"llms":117,"misp":117,"python":118,"grafana":117,"powerpoint":117,"advanced excel":117,"power automate":117,"soar platforms":117,"recorded future":118,"api integrations":118,"automation tools":117,"crowdstrike intelligence":118,"google threat intelligence \u002F virustotal":118},2,3,[45,46,47,48,49,50,51,52,53,54,55,56,57,58],{"communication":121,"composure under pressure":121,"bridge-building":118,"vigilance":118,"curiosity":118,"proactiveness":118,"autonomy":118,"outcome-driven":118,"collaboration":118,"process awareness":118},4,[59,60,61,62,63,64,65,66,67,68],{"kill chain":121,"mitre att&ck":121,"diamond model":121,"ioc management":117,"detection logic":118,"digital forensics":117,"incident response":117,"it administration":117,"threat monitoring":121,"soc\u002Fcti operations":121,"telemetry analysis":118,"threat intelligence":121,"detection engineering":117,"threat sharing platforms":117,"threat intelligence lifecycle":121,"structured analytical techniques":121},[69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],{"detected_language_jobad":126,"required":127},"en",[128],[129],{"language":130,"level":131},"ENGLISH","C1",[133,134],"Information and Communications Technology Professionals","Database and Network Professionals",[133,134],"https:\u002F\u002Fcareers.allianz.com\u002Fglobal\u002Fen\u002Fjob\u002F108396\u002Fthreat-intelligence-engineer-3377",1]