> Markdown version of [/jobs/ext/1605113-threat-intelligence-engineer](https://www.wearedevelopers.com/jobs/ext/1605113-threat-intelligence-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Threat Intelligence Engineer

- **Company:** Allianz Group
- **Location:** Barcelona, Spain
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Cyber Security, Python (Programming Language), Scripting, Microsoft Power Automate, Cyber Threat Analysis, Nintex, Api Management, Security Orchestration, Automation & Response
- **Published:** July 18, 2026
- **Apply:** https://es.trabajo.org/oferta-3453-0c65755f28285b5d47457c4286a4d17e

## About the Role

of Threat Intelligence Lifecycle and analytical models (Diamond Model, Kill Chain) * Experience with tools such as Google SecOps, CrowdStrike Falcon/Intelligence, Google Threat Intelligence/VirusTotal, Recorded Future, MISP or similar Requisitos principales * hybrid work model * up to 25 days abroad * bonus scheme * pension * employee shares program * employee discounts

## Description

detection content by creating rules and guidance for deployment by detection engineering teams * Map threat actor TTPs to MITRE ATTu0026CK and identify coverage gaps to generate relevant hunting leads * Build and maintain automation for repetitive intelligence workflows using SOAR, Power Automate, N8N, Python, scripting, and API integrations * Apply AI to categorize intelligence, enrich indicators, and accelerate decision-making in daily workflows * Communicate findings via dashboards, intelligence notes, and operational briefings for diverse audiences * Support IOC lifecycle and provide analytical input, validation, and triage during active incidents (on-call rotations) Responsabilidades * Hands-on intrusion analysis experience with real-world attack investigations * Proven ability to turn intelligence into production-ready xqbhyrx detection rules * Strong knowledge of MITRE ATTu0026CK at the procedure level * Coding and automation skills (Python, scripting, APIs) * Understanding


## Related Videos

- [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Agentic employees in world's most downloaded FinTech app](https://www.wearedevelopers.com/videos/100123-agentic-employees-in-world-s-most-downloaded-fintech-app)

## Related Articles

- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)