{"id":772489,"url":"https://alion.io/job/here-senior-threat-intelligence-engineer","title":"Senior Threat Intelligence Engineer","company":{"id":40571,"name":"HERE Technologies","domain":"here.com","url":"https://alion.io/company/here","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":100,"open_postings":8,"ghost_share":0,"stale_share":0,"repost_share":0.125,"time_to_fill_p50_days":12,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Prague, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":37000,"max_usd":84000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IBM QRadar","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MISP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"OpenCTI","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"STIX","optional":false},{"name":"TAXII","optional":false},{"name":"ThreatConnect","optional":false}],"status":"live","first_seen_at":"2026-09-11T21:55:32Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-11-04T14:45:10Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":53},"description":"What's the role?\nWe are looking for a highly motivated and technically skilled Threat Intelligence Engineer to join our Cyber Security team. The ideal candidate will combine strong analytical capabilities with hands-on engineering and automation skills to proactively identify, analyze, operationalize, and communicate cyber threats relevant to the organization.\nThis role focuses on transforming threat intelligence into actionable security outcomes by leveraging Threat Intelligence Platforms (TIPs), automation, adversary tracking, and close collaboration with SOC, Incident Response, Detection Engineering, and Security Operations teams.\nThe successful candidate will help mature the company’s Cyber Threat Intelligence (CTI) capabilities, improve visibility into emerging threats, and automate intelligence collection, enrichment, and distribution workflows.\nKey Responsibilities\nMonitor and analyze the global threat landscape to identify threats relevant to the company, industry, assets, and business operations.\nTrack emerging threat actors, malware campaigns, vulnerabilities, ransomware groups, phishing activity, and attacker TTPs.\nCollect, enrich, correlate, and operationalize Indicators of Compromise (IOCs) and threat intelligence from internal and external sources.\nOperate and maintain Threat Intelligence Platforms, including MISP and related integrations.\nDevelop automated workflows for threat ingestion, enrichment, deduplication, scoring, and distribution.\nIntegrate threat intelligence into SIEM, SOAR, EDR/XDR, ticketing systems, and detection pipelines through APIs and automation.\nProduce tactical, operational, and strategic intelligence reports for technical and non-technical stakeholders.\nSupport Incident Response, Threat Hunting, Detection Engineering, and Purple Team activities with actionable intelligence.\nConduct malware, infrastructure, and campaign analysis to identify attacker patterns and risks.\nEvaluate new intelligence sources, tools, and technologies to continuously improve CTI capabilities.\nBuild dashboards, metrics, and reporting capabilities to measure intelligence effectiveness and threat trends.\nWho are you?\n3+ years of experience in Cyber Threat Intelligence, SOC, Detection Engineering, Incident Response, or similar cybersecurity roles.\nHands-on experience with Threat Intelligence Platforms such as MISP, OpenCTI, ThreatConnect, or equivalent.\nStrong understanding of Cyber Threat Intelligence concepts, IOC lifecycle management, and intelligence-driven defense.\nExperience analyzing threat actors, malware, phishing campaigns, vulnerabilities, and adversary TTPs.\nPractical knowledge of MITRE ATT&CK f ramework.\nExperience with SIEM technologies such as Splunk, Microsoft Sentinel, Elastic, QRadar, or similar.\nBasic to intermediate scripting and automation skills using Python, Bash, or similar languages.\nFamiliarity with STIX/TAXII and intelligence-sharing methodologies.\nUnderstanding of networking, operating systems, cloud environments, and modern attack techniques.\nAbility to communicate technical findings clearly to both technical and business audiences.\nStrong analytical mindset with attention to detail and prioritization skills.\nWould be a plus\nThreat Detection experience would be a plus.\nWhat Do We Offer?\nWork on the development of large-scale services, serving and storing petabytes of data.\nWork with cutting-edge, modern technologies.\nA great work-life balance.\nFlexible working hours.\nCompetitive salary plus bonus.\nFantastic & talented people from 60+ countries worldwide.\nChange is HERE. Apply Now!\nAs part of HERE Technologies employment process, candidates will be required to successfully complete a pre-employment screening process. This offer and any related claims are subject to the successful completion of a pre-employment screening. This will involve employment, education, and criminal verification if applicable.\n#LI-AY2 #LI-HYBRID\nWho are we?\nHERE Technologies is a location data and technology platform company. We empower our customers to achieve better outcomes - from helping a city manage its infrastructure or a business optimize its assets to guiding drivers to their destination safely.\nAt HERE we take it upon ourselves to be the change we wish to see. We create solutions that fuel innovation, provide opportunity and foster inclusion to improve people’s lives. If you are inspired by an open world and driven to create positive change, join us. Learn more about us on our YouTube Channel.","description_format":"text","description_chars":4496,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Artificial Intelligence","Smart Mobility"],"lifecycle":[{"event":"open","at":"2026-09-11T21:55:32Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.48,"p_room":0.35,"age_days":53,"expected_fill_days":12,"reasons":["conf:1","velocity","win:tail"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/here-senior-threat-intelligence-engineer","json_url":"https://alion.io/job/here-senior-threat-intelligence-engineer.json","meta":{"generated_at":"2026-11-04T18:01:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27682,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":40571},"rest":"https://alion.io/mcp/rest/get_company?id=40571"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhere-senior-threat-intelligence-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhere-senior-threat-intelligence-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhere-senior-threat-intelligence-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/here-senior-threat-intelligence-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhere-senior-threat-intelligence-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":772489}},{"tool":"search_jobs","arguments":{"company":"here.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":772489},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}