Cybercrime Intelligence Analyst

About the role

This position is based in Germany and focuses on uncovering, interpreting, and operationalising insights about cyber‑criminal ecosystems and emerging threats. You will work at the intersection of cybersecurity and intelligence analysis, turning complex data from diverse sources into actionable intelligence that helps organisations anticipate and mitigate real‑world cyber threats.

Key responsibilities

• Analyse cyber adversaries, emerging threats, intrusion campaigns and cyber‑criminal activities to produce actionable intelligence outputs.
• Collect, validate and interpret information from multiple sources to generate tactical intelligence products and threat insights.
• Conduct in‑depth analysis of tactics, techniques and procedures (TTPs) used in cyber intrusions and criminal operations.
• Perform attribution analysis and identify connections between threat actors, infrastructure and activity clusters.
• Use intelligence platforms, analytical tools and structured methodologies to enhance research quality and reporting accuracy.
• Deliver timely, independent intelligence support for customer requests, investigations and bespoke threat‑intelligence requirements.
• Contribute to data‑collection initiatives and support AI‑enhanced and automated intelligence workflows.
• Produce intelligence briefings, bulletins and reports covering adversary profiles, regional threats and industry‑specific risks.
• Collaborate with a global intelligence team to ensure consistent, high‑quality intelligence production and knowledge sharing.

Required profile

• Solid understanding of cyber threat intelligence (CTI) and its role in supporting security operations and risk mitigation.
• Experience or familiarity with security functions such as SOC, Incident Response, Threat Hunting, Vulnerability Management or Fraud Prevention.
• Knowledge of the cyber‑criminal ecosystem, including malware operations, phishing campaigns and fraud schemes.

Required skills

• SIEM
• SOAR
• EDR/XDR
• TIP platforms
• Firewalls
• IPS
• IAM
• Cloud security controls