> Markdown version of [/jobs/ext/2000909-senior-threat-intelligence-analyst](https://www.wearedevelopers.com/jobs/ext/2000909-senior-threat-intelligence-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Threat Intelligence Analyst - **Company:** ZEISS Group - **Location:** Jena, Germany - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Profiling, Open Source Intelligence, Cloud Platform System, Mitre Att&ck, Advanced Reports, Cyber Threat Analysis, Information Technology, Cybercrime, Cyber Warfare - **Published:** August 9, 2026 - **Apply:** https://www.careerjet.de/jobad/de539277f69fe97128de58b5b609fd6b18 ## About the Role Professional Experience: Several years of experience in threat intelligence environments, SOC or DFIR. Technical Deep-Dive: Strong knowledge of IT infrastructures, networks, operating systems, and cloud environments. Specific Tool Expertise: Proven hands-on experience with Google Threat Intel, MISP, or Microsoft Defender TI to drive proactive security measures. Framework Proficiency: Solid understanding of attacker TTPs and the ability to map observed activity to frameworks such as MITRE ATT&CK, NIST, or SANS. Analytical Mindset: Proven experience in handling complex or high-severity incidents and identifying emerging cyber threats and vulnerabilities. Communication: Ability to communicate technical findings clearly and concisely to different stakeholder groups and translate threats into organizational requirements. Resilience: A structured, reliable, and resilient working style, especially when supporting threat mitigation efforts in critical situations. As part of the recruitment process, security-relevant background checks may be conducted. In the advanced application process, a police clearance certificate must be provided. ## Description Corporate Information Technology (CIT) is the central part of the company's strategy, developing and implementing innovative security solutions to enhance efficiency and competitiveness in the Carl Zeiss Group. By working closely with various business units, CIT ensures that technological advancements and digital transformations are seamlessly integrated into business processes. Your Role In this role, you serve as a senior technical expert within the Cyber Defense Center. You are responsible for identifying, analyzing, and assessing global cyber threats, transforming complex data from diverse sources into actionable insights to proactively strengthen our defense strategies. Your main responsibilities include: Intelligence Collection & Analysis: Collect, process, and analyze information from various sources, including open-source intelligence (OSINT), dark web forums, and commercial threat intelligence feeds. TTP & Actor Profiling: Develop and maintain a comprehensive understanding of threat actors, their tactics, techniques, and procedures (TTPs), and their potential impact on the organization. Advanced Tooling & Automation: Configure and maintain the Threat Intelligence Platform (TIP) and utilize industry-standard tools such as Google Threat Intel (GTI), MISP, and Microsoft Defender Threat Intelligence (Defender TI) to automate and enrich data. Actionable Reporting: Generate threat intelligence products for diverse audiences, including technical reports and recommendations for defensive measures. Strategic Collaboration: Collaborate closely with the SOC, CIRT, and other business representatives to identify areas where threat intelligence provides the most benefit. Risk Assessment: Use structured analytic techniques to identify trends, assess risks, and escalate critical technical findings to the Incident Commander. Capability Enhancement: Research and evaluate new tools, techniques, and data sources to enhance overall threat intelligence capabilities. Documentation & Governance: Ensure complete and structured documentation of all activities, including the creation of playbooks, policies, and procedures. ## About ZEISS Group ZEISS is technology, optics and innovation. We develop, manufacture and sell highly innovative products and solutions for our customers in a variety of business fields. As one of the world’s top technology companies with a portfolio aligned with future growth areas like digitalization, healthcare and Smart Production, and a strong brand to boot, ZEISS is shaping the future far beyond the optics and optoelectronics industries. The company’s significant, sustainable investments in research and ... **Tech Stack:** Java, .NET, Node.js, C#, Angular, React, Kubernetes, Software Architecture, C++, Python **Industries:** Electronics, Information Tech, Manufacturing, Medical Devices, Computer Software, Industrial Automation, R&D [Company profile](https://www.wearedevelopers.com/companies/1031-zeiss-group) ### More Jobs at ZEISS Group - [praxissemester-softwareentwicklung-inbetriebnahme-und-servicesoftware-m-w-x](https://www.wearedevelopers.com/jobs/ext/1999035-praxissemester-softwareentwicklung-inbetriebnahme-und-servicesoftware-m-w-x) - [Endpoint Security Engineer - OT](https://www.wearedevelopers.com/jobs/ext/1998712-endpoint-security-engineer-ot) - [Senior Cybersecurity Incident Responder](https://www.wearedevelopers.com/jobs/ext/1999049-senior-cybersecurity-incident-responder) - [Digital Forensic Analyst](https://www.wearedevelopers.com/jobs/ext/1982266-digital-forensic-analyst) - [Endpoint Security Engineer](https://www.wearedevelopers.com/jobs/ext/1962698-endpoint-security-engineer) ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling) - [Profiling Symfony & PHP apps with Blackfire](https://www.wearedevelopers.com/videos/265-profiling-symfony-php-apps-with-blackfire) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Data Analyst Salary Germany](https://www.wearedevelopers.com/magazine/277-data-analyst-salary-germany) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)