Want to know if this job is worth applying to?
Bratislava, Slovensko
Hybrid
Summary
The Threat Intelligence team delivers actionable cyber threat intelligence that helps organizations identify, understand, and mitigate emerging cyber threats. Through advanced research, intelligence collection, data enrichment, and intelligence sharing, the team supports customers, partners, and internal stakeholders in strengthening their security operations and improving cyber resilience.Job description
Meet the Team
You will become part of the ESET Threat Intelligence team, working closely with intelligence analysts, engineers, product teams, and security professionals across the organization. The team is responsible for delivering high-quality threat intelligence data, enabling integrations with leading security platforms, and helping customers operationalize threat intelligence within their security environments.
This position is open in Bratislava Headquarters and Brno, offering the opportunity to work in an international environment at the forefront of cybersecurity and threat intelligence.
About the Role
As a Security Specialist, you will serve as a technical subject matter expert for ESET Threat Intelligence services and integrations. You will help customers and partners maximize the value of threat intelligence through deployment guidance, integrations, automation, and technical consultation.
Develop and maintain deep technical expertise in ESET's threat intelligence platform, data feeds, APIs, TAXII/STIX services, MISP, OpenCTI, and related infrastructure.
Assist customers and partners with the integration, onboarding, and operationalization of threat intelligence data within their security ecosystems, including MISP, OpenCTI, SIEM, SOAR, TIP, XDR, and custom security platforms.
Provide technical guidance on threat intelligence data models, schemas, indicators, confidence levels, contextual enrichment, tagging methodologies, and intelligence consumption best practices.
Develop and maintain scripts, connectors, and automation workflows supporting threat intelligence ingestion, enrichment, and integration use cases.
Collaborate closely with Threat Intelligence, Product Management, Engineering, and Customer Success teams to enhance integration capabilities, data delivery mechanisms, and overall customer experience.
Gather customer requirements, use cases, and feedback, translating them into recommendations for new integrations, workflows, intelligence products, and platform improvements.
Support troubleshooting and resolution of technical issues related to threat intelligence integrations and services.
Contribute to documentation, technical enablement materials, and knowledge sharing activities.
Stay current with emerging cybersecurity threats, threat intelligence standards, and industry best practices.
Essential Requirements
Minimum 2 years of experience in Threat Intelligence, Cyber Threat Intelligence (CTI), Security Operations, Detection Engineering, SOC, or a related cybersecurity field.
Experience working with threat intelligence platforms such as MISP, OpenCTI, or comparable solutions.
Understanding of threat intelligence standards and formats including STIX, TAXII, IOC management, and intelligence-sharing methodologies.
Knowledge of cybersecurity technologies and workflows, including one or more of the following: SIEM, SOAR, TIP, EDR/XDR, vulnerability management, or incident response platforms.
Experience with scripting or automation using Python, PowerShell, or similar technologies.
Good understanding of network security, malware, threat actors, attack techniques, and cyber threat landscapes.
Strong analytical and troubleshooting skills.
Excellent communication skills with the ability to explain technical concepts to both technical and non-technical audiences.
English language proficiency at B2 level or higher (written and spoken)
Desirable Requirements
Experience supporting enterprise customers, partners, or stakeholders in a cybersecurity environment.
Hands-on experience integrating security platforms and products using APIs.
Familiarity with threat intelligence frameworks and methodologies (e.g., MITRE ATT&CK, Cyber Kill Chain, Diamond Model).
Experience with cloud security technologies and modern security operations platforms.
Relevant cybersecurity certifications or experience working in an international cybersecurity environment.
Additional Information: The role may require occasional travel for customer meetings, conferences, workshops, or internal collaboration events.
Ready to Make an Impact?
If you’re excited about this opportunity and feel it aligns with your journey, don’t hesitate—apply and show us what drives you.
Basic wage component (brutto): from 2800€/month (brutto)
* The final basic wage component can be increased accordingly to individual skills and experience of the selected candidate.
* Performance bonus 2 times per year up to 10% of the basic salary paid for the evaluation period(usually 6 months).
#LI-JM1 #mid-senior #LI-Hybrid
Benefits
Primary location
BratislavaAdditional locations
BrnoTime type
Full time