Cyber Threat Intelligence Analyst - European Commission (FGIV, Brussels)

About this position

The summary below is published by European Commission on the official vacancy notice. Our own analysis — salary realism, comparable openings, career trajectory, language profile — follows further down the page.

Key responsibilities

According to the vacancy notice, the role centres on the following duties:

• Analyse threat information from open and commercial sources, peers, partners, and EU constituents
• Maintain and improve technical threat data flows of IOCs and detection rules
• Operate threat intelligence platforms such as MISP & OpenCTI
• Track the activity of top threat actors and the evolution of techniques, tactics and procedures (TTPs)
• Feed CERT-EU's cyber threat intelligence knowledge base
• Write cyber threat intelligence reports: alerts, cyber briefs, and threat landscape reports
• Conduct cyber threat research according to directions set by hierarchy

Are you eligible?

Check these requirements from the notice before investing time in an application:

• Education: Completed university studies of at least three years attested by a diploma
• Experience: At least three years of professional experience in information or cybersecurity. Experience in a CERT/CSIRT, SOC or incident-response environment would be an asset.
• Languages: One of the 24 official EU languages (C1), A second official EU language (B2)
• Key skills: Strong practical knowledge of operating systems, in particular Windows and Linux, Practical knowledge of application, network and IoT security, Experience in cyber threat intelligence, including analysis of threat actors, IOCs and TTPs, Strong analytical and investigative skills, Strong problem-solving skills and ability to identify and connect relevant information from different sources, Ability to communicate complex technical findings clearly and concisely, both orally and in writing, Ability to establish and maintain effective working relationships in an international and multidisciplinary environment, High degree of commitment, flexibility and discretion, Excellent command of English, both orally and in writing
• Eligibility: Must be a citizen of an EU Member State and enjoy full rights as a citizen. Must have fulfilled any obligations imposed by applicable laws concerning military service. Must be physically fit to perform the duties. Must produce appropriate character references. Must have passed an EPSO CAST in Function Group IV or be registered in the EPSO CAST database. Must be eligible to obtain EU SECRET securi…

Selection process

The notice describes the following selection steps:

• Candidates selected from EPSO database with appropriate profile
• Interview with selection panel to assess best candidates
• Security vetting conducted with national administration of Member State
• Mandatory pre-recruitment medical check-up

Contract and working arrangements

Contract duration: 1 year, renewable one or more times up to a maximum duration of 6 years.

Working arrangements: Brussels.

Hiring unit: DIGIT CERT-EU, European Commission.

Position details

Reference

EC/2026/DIGIT/431130

Directorate-General

DIGIT – Digital Services

Vacancy Notice

Download PDF

Last Verified

18 September 2026

Position overview

This is the official EU Careers listing for Cyber Threat Intelligence Analyst at European Commission based in Brussels at the FGIV grade level (Contract Agent). The vacancy reference is EC/2026/DIGIT/431130. It is hosted by DIGIT – Digital Services, the Directorate-General responsible for this policy area. The role falls under the Information Technology domain.

Cyber Threat Intelligence Analyst

in DIGIT CERT - EU of the European Commission

Job title: Cyber Threat Intelligence Analyst

Domain: Information and Communication Technologies

Where: DIGIT CERT -EU, Brussels

Function Gr oup : FG IV

Contract Type : 3b

Express your interest until : 07 .10 .202 6 - 12.00 (noon, Brussels time )

WE ARE

DIGIT -Digital Services is the Directorate whose aim is to deliver digital services to enable EU policies

and to support the Commission’s internal administration. CERT -EU is the Cybersecurity Service for

the European Union institutions, bodies, offices and agencies (Union entiti es). CERT -EU is

administratively attached to DIGIT.

Established in 2011 to shore up the ICT security for the Union entities, we have been steadily

expanding our IT security operations over the years and currently serve over 90 such entities spread

across the Continent and beyond.

From our base in Brussels, we work with a range of peers, partners and researchers from all over the

world to ensure we maintain our technological edge and have access to the best -in -class expertise.

WE PROPOSE

We wish to hire a Cyber Threat Intelligence analyst to join our CTI team.

In close collaboration with the CTI Head of Sector , the selected candidate will:

- Analyse threat information coming from: open and commercial sources, our peers and

partners, our constituents (the European Union Institutions, Bodies, Offices and Agencies), etc.

- Maintain and improve technical threat data flows of IOCs and detection rules.

- Operate threat intelligence platforms such as MISP & OpenCTI.

- Track the activity of top threat actors and the evolution of techniques, tactics and procedures

(TTPs).

- Feed CERT -EU's cyber threat intelligence knowledge base.

- Write cyber threat intelligence reports : alerts, cyber briefs, and threat landscape reports.

- Conduct cyber threat research according to the directions set by hierarchy .

This is a highly technical, challenging, and empowering job with enough room for the selected

candidate's competencies to shine in a very friendly, supportive, human and professional

environment. (Reference: Call for interest EC/2026/DIGIT/431130 )

WE LOOK FOR

The selected candidate should have:

- At least three years of professional experience in information or cybersecurity. Experience in

a CERT/CSIRT, SOC or incident -response environment would be an asset.

- Strong practical knowledge of operating systems, in particular Windows and Linux.

Knowledge of Android would be an advantage.

- Practical knowledge of application, network and IoT security.

- Experience in cyber threat intelligence, including the analysis of threat actors, indicators of

compromise (IOCs) and tactics, techniques and procedures (TTPs).

- Familiarity with threat -intelligence and security tools, such as threat -intelligence platforms,

would be an advantage.

- Experience with scripting or automation, such as Python or PowerShell, would be an

advantage.

The candidate should also demonstrate the following skills:

- Strong analytical and investigative skills, with the ability to process and assess large amounts

of information within a limited timeframe.

- Strong problem -solving skills and the ability to identify and connect relevant information

from different sources.

- The ability to communicate complex technical findings clearly and concisely, both orally and

in writing.

- The ability to establish and maintain effective working relationships in an international and

multidisciplinary environment.

- A high degree of commitment, flexibility and discretion .

- Excellent command of English, both orally and in writing.

The candidate must be eligible to obtain EU SECRET security clearance. (Reference: Call for interest EC/2026/DIGIT/431130 )

HOW TO EXPRESS YOUR INTEREST?

With a view to guarantee ing equal access to all, the Commission recruits from an open database of

spontaneous applications. The present call for interests aims at helping the recruiters to identify

potentially interested candidates within this database.

In practice, t o express your interest , please follow the subsequent two steps:

1. If you are not registered yet in the open EPSO database, please do so at the following

address: CAST Permanent . Please select under selection procedures for contract agent the

CAST permanent profile that best suits your education and experience.

2. You should send your documents in a single pdf in the following order:

1. your CV 2. completed application form.

Please send these documents by the publication deadline to [email protected]

indicating the call for interest reference EC/2026/DIGIT/431130 in the subject .

No applications will be accepted after the publication deadline. (Reference: Call for interest EC/2026/DIGIT/431130 )

ANNEX

1. Selection

➢ Am I eligible to apply?

You must meet the following eligibility criteria when you validate your application :

Our rules provide that you can only be recruited as a contract agent at the European Commission if

you :

General criteria:

- Are a citizen of a Member State of the EU and enjoy full rights as a citizen ;

- Have fulfilled any obligations imposed by applicable laws concerning military service;

- Are physically fit to perform the duties linked to the pos ition ;

- Produce the appropriate character references as to suitability for the performance of the

duties .

- Have passed a n EPSO CAST in the relevant Function Group for this pos ition. At the stage of

the application, it is sufficient to be registered in the EPSO CAST data base.

Qualifications:

(a) Have a level of education which corresponds to completed university studies of at least three

years attested by a diploma .

Only qualifications issued or recognised as equivalent by EU Member State authorities (e.g. by the

Ministry of Education) will be accepted.

Languages:

- have a thorough knowledge (minimum level C1) of one of the 24 official languages of the

EU 2

- AND have a satisfactory knowledge (minimum level B2) 3 of a second official language of

the EU , to the extent necessary for the performance of the duties.

➢ What about the selection steps?

2The official languages of the European Union are: BG (Bulgarian), CS (Czech), DA (Danish), DE (German), EL (Greek), EN (English), ES (Spanish), ET (Estonian), FI (Finnish), FR (French), GA (Irish), HR (Croatian), HU (Hungarian), IT (Italian), LT (Lithuani an), LV (Latvian), MT (Maltese), NL (Dutch), PL (Polish), PT (Portuguese), RO (Romanian), SK (Slovak), SL (Slovenian), SV (Swedish). 3For details on language levels, please see the Common European Framework of Reference for Languages (https://europass.cedefop.europa.eu/en/resources/european -language -levels -cefr).

(Reference: Call for interest EC/2026/DIGIT/431130 )

The selecting unit chooses from the EPSO database 4 candidates with the appropriate profile and

invites them to an interview . For the interview a selection panel is set -up to assess the best

candidates. Due to the large volume of applications that we may receive only candidates selected

for the interview will be notified.

For operational reasons and in order to complete the selection procedure as quickly as possible in

the interest of the candidates and of the institution, the selection procedure will be carried out in

English and possibly in a second official language.

2. Recruitment

The candidate selected for recruitment will be requested to provide documentary evidence in support

of the statements made in the database and, where relevant, the call for interest .

The successful candidate will be required to undergo a mandatory pre -recruitment medical check -up

carried out by the Commission. Candidates will be required to undergo a security vetting that is

conducted with the national administration of the Member State .

➢ Type of contract and working conditions

The place of employment will be in Brussels .

The successful candidate will be engaged as a contract agent under Article 3(b) of the Conditions

of Employment of Other Servants , in function group FG IV . General information on Contract Agents

can be found at this link .

The grade or proposed grade range , as well as the step in that grade , will be defined on the basis of

the candidates’ previous professional experience, in accordance with Commission Decision

C(201 7)6760 laying down the criteria applicable to classification in step on engagement .

The duration of the first contract will be 1 year. Subject to the interest of the service, the contract

may be renewed one or more times up to a maximum duration of 6 years.

The duration of the rene wal(s) will be defined according to the General Implement ing Rules in force

at that moment (currently , Commission Decision C(2017)6760 on policies for the engagement and

use of contract agents ).

Contract agents recruited in Function Group I V have to successfully complete a 9-month probationary

period.

4Therefore, candidates who did not pass already a CAST on the level Function Group [IV] , should register their profile at this address .

The pay of staff members consists of a basic salary supplemented with specific allowances, including,

where applicable, expatriation and family allowances. The provisions guiding the calculation of these

allowances can be consulted in the Conditions of Emp loyment of Other Servants. As a member of

staff of the European institutions, your pay is subject to a tax raised by those institutions.

The European Commission applies a policy of equal opportunities and non -discrimination in

accordance with Article 1d of the Staff Regulations.

Should you need further information on working conditions, please refer to Working conditions and

benefits of EU Careers .

For information related to Data Protection, please see the Specific Privacy Statement under “7.

Salary at this grade

Basic monthly salary at FGIV runs from €4,449 (step 1) to €5,034 (top step), giving an annual range of roughly €53,388 to €60,408 before tax and allowances. Steps increase automatically every two years; the figures here are taken from the salary grid in the EU Staff Regulations.

Eligible staff posted away from their country of nationality also receive an expatriation allowance worth 16% of basic salary (around €712 per month at step 1 of FGIV) together with household, dependent-child, and education allowances where applicable. Take-home pay is then adjusted by the country correction coefficient for Brussels. For a worked example see our correction coefficients guide and the EU salaries overview.

Application timeline

This vacancy was first listed on 18 September 2026, 2 days ago.

The application deadline is 7 October 2026, 16 days from today. Late applications are not accepted, so submit through the official EU Careers portal well in advance.

Last verified against the EU Careers feed on 18 September 2026 (2 days ago).

Where to learn more

For full responsibilities, requirements, and career progression at FGIV see our FGIV grade page; for headcount, mission, and other open vacancies at European Commission see the European Commission institution page; for the cost of living, correction coefficient, and other postings in Brussels see our Brussels location page; for related vacancies in the Information Technology field browse our Information Technology domain page.

New to EU careers? Our beginner's guide walks through entry routes, EPSO competitions, and what to prepare. For application logistics see application tips and EPSO competitions.