Ready to make a real impact in the financial industry? At Deutsche Börse Group, we'll empower you to grow your career in a supportive and inclusive environment. With our unique business model, driven by 15,000 colleagues around the globe, we actively shape the future of financial markets. Join our One Global Team!

The Group Security department directly contributes to execution of the Deutsche Börse Group information security strategy. As a central service provider for the Group entities, Group Security is responsible for protecting information assets in terms of safety, integrity, confidentiality, authenticity, and availability by enforcing information security controls based on the relevant regulatory requirements and follows the international standard ISO/IEC 27000-series on the Information Security Management System.

The Threat Intelligence Specialist plays a pivotal role in safeguarding Deutsche Börse Group's global operations against cyber threats. By collecting, analyzing, and delivering actionable intelligence, this role strengthens the organization's proactive defense posture. The expert works closely with Security Operations, Incident Response, Data Protection, and Risk Management teams to counter evolving threat actors targeting the financial sector.

Your responsibilities:

Perform cyber threat intelligence operations, delivering strategic insights and actionable reports to guide business decisions and reduce risk.
Collect and analyze intelligence from OSINT, commercial feeds, dark web sources, and industry sharing groups to detect emerging threats.
Collaborate with SOC, CERT, and executive stakeholders to support investigations, incident response, and security awareness initiatives.
Perform threat hunting activities based on IoCs
Monitor geopolitical developments and regulatory changes (e.g., GDPR, DORA) to assess potential business impact.
Drive innovation in threat detection through cloud adoption, automation, and continuous learning within the Threat Intelligence team.

University degree in Information Systems, Political Science, or a related discipline.
Minimum 5 years of experience in Threat Intelligence, Cybersecurity, or a related field.
Strong understanding of legal and regulatory requirements in the financial industry.
Proven ability to translate regulatory mandates into actionable operational plans.
Deep expertise in cybersecurity technologies and methodologies (e.g., SIEM, IDS/IPS, threat analysis, incident response, forensics, MITRE ATT&CK).
Hands-on experience with dark web intelligence gathering and its application in dynamic investigations.
Proficiency with threat intelligence platforms and analytical tools.
Exceptional analytical thinking, creativity, and problem-solving skills.
Fluent in written and spoken German and English.

We are committed to providing a work environment where everyone feels welcome and can reach their full potential. Our standards go far beyond simply matching candidates with the right position.

Mobility
We enable you to move freely with our job tickets, job (e-)bikes and free parking opportunities.

Work environment
Collaboration, communication, or deep focus – in our modern office buildings you will find the perfect work environment. Free drinks and food and meal allowances included.

Health and wellbeing
We care for your health and wellbeing and besides various health promotion measures we offer you a group accident insurance and additional insurance offers at discounted rates.

Financial stability
We provide financial stability by offering attractive salaries, company pension schemes, participation in our Group Share Plan, as well as bonuses, subsidies and discounts.

Hybrid work
Collaborate and exchange on-site or work remotely several days a week in line with business needs and local regulations. Our hybrid working model combines the best of both worlds.

Flexible working hours
We want your job to fit your life situation and offer flexible working time models, part-time models, childcare allowance, or the possibility to study alongside your job.

Internationality
Our market infrastructures are globally connected. Working with us means collaborating with like-minded colleagues across over 60 locations from more than 100 nations.

Development
We promote individual development by offering internal development programmes, mentoring, further education and training budgets.

CVMT1_DE