Threat Intelligence & Detection Engineer

Life tastes better with ice cream

With 19.000 expert ice cream colleagues and iconic brands like Wall’s, Cornetto and Ben & Jerry’s, loved in 76 countries, we are the world’s largest Ice Cream company leading the industry.   We create iconic ice cream brands that are part of everyday life, bringing moments of joy to millions of people around the world. Everybody loves ice cream. And as the world’s biggest pure‑play ice cream company, we have the scale and ambition to make a real difference. 

What truly sets us apart is how we work. 

We move fast and keep things simple. We turn ideas into action, trust people to take ownership, and work as one team to win together with integrity. Our culture is high‑performance, collaborative and focused on getting things done. 

We’re curious and ready for what’s next. We embrace digital, use data to make better decisions, and keep learning, including how AI can help us work smarter and serve consumers better.  

The role As part of our growth strategy, we are seeking a highly skilled and hands-on Threat Intelligence & Detection Engineer who will be responsible for developing and maintaining TMICC's cyber threat intelligence, detection engineering, threat hunting, and security automation capabilities. This role focuses on transforming threat intelligence into actionable security outcomes through the development of high-quality detections, threat hunting activities, security automation workflows, and operational reporting. You will report directly to the Head of Security Operations.

What you'll be responsible for Monitor and analyze cyber threats, threat actors, vulnerabilities, and attack techniques relevant to the organization. Manage relationships with CTI providers and intelligence partners, validating and operationalizing external threat intelligence. Improve detection coverage, threat hunting, and SOC monitoring capabilities through intelligence-driven approaches. Develop and optimize Microsoft Sentinel detection rules, analytics, KQL queries, workbooks, watchlists, and correlation logic. Build detections across cloud, identity, endpoint, email, SaaS, network, and OT environments. Map detection coverage against MITRE ATT&CK techniques and manage the complete detection lifecycle. Conduct proactive threat hunting across platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, and Azure. Develop threat hunting hypotheses and convert findings into operational detections and monitoring improvements. Design and maintain Palo Alto XSOAR playbooks, automations, integrations, workflows, and dashboards. Automate threat enrichment, investigation, containment, and response workflows. Create security reports, dashboards, detection metrics, threat intelligence reports, and SOC performance insights. Collaborate with MSSP/MDR providers to enhance monitoring effectiveness and onboard new security technologies. Maintain governance, audit readiness, documentation, and traceability from threat identification to detection and response. Improve detection capabilities through incident analysis, lessons learned, and continuous tuning. Support OT threat detection using tools like CrowdStrike, Claroty, and OT telemetry sources.

We're looking for someone who

Education and Experience

• 8-10 years of experience in Cyber Threat Intelligence, Detection Engineering, Threat Hunting, Security Operations, or Cyber Defense roles. • Strong hands-on experience with Microsoft Sentinel, Defender XDR, and advanced KQL development. • Strong experience developing Sentinel analytics rules, hunting queries, workbooks, and detection content. • Hands-on experience with Palo Alto XSOAR playbook development, automation workflows, integrations, dashboards, and reporting. • Experience working with MSSPs, MDR providers, and CTI service providers. • Experience consuming and operationalizing intelligence from commercial intelligence platforms and external intelligence partners. • Experience with CrowdStrike, Claroty, Microsoft Defender, and enterprise detection platforms is desirable.

Skills and Competencies

• Deep understanding of MITRE ATT&CK and adversary behaviour analysis. • Strong detection engineering and threat hunting capabilities. • Advanced KQL development and log analytics skills. • Strong stakeholder engagement and relationship management capabilities. • Experience collaborating with MSSPs, MDR providers, CTI vendors, and external security partners. • Strong presentation and reporting skills.

Professional Certifications

• SC-200 (preferred) • GCTI (highly desirable) • GCIH (preferred) • GCDA (desirable) • GMON (desirable) • Palo Alto XSOAR Engineer Certification (highly desirable) • CISSP (desirable)

What you'll get

Alongside meaningful work and strong development, we offer a reward package that typically includes

Market-competitive pay and performance related rewards Flexible ways of working Support for health, wellbeing and life outside of work Time off to rest and recharge Ongoing learning and development opportunities Specific benefits vary by location

#TMICC

Why join us?

This is a place for people who are passionate about ice cream and are growth obsessed - both for the business and for themselves. People who act like an owner and drive our business end-to-end. People who are driven by success to deliver more than we ever thought we could! 

You’ll thrive here if you value an inclusive culture, with low ego and hierarchy - and if you’re excited to continuously learn and challenge how we work, using digital, data, and new thinking to push us forward.

• Roles with real accountability and visible impact
• Free to move fast, experiment and challenge how things are done
• Continuous learning and development as the business grows
• Reward linked to performance and contribution.

Your career here is shaped by what you deliver, as you work across functions and markets and grow with the business.

Ready to build the future of Ice Cream?

If this sounds like the place where you'd thrive, we'd love to hear from you. Apply online and share your CV. We'll review your application and be in touch with the next steps.

If you are an individual with a disability and require assistance at any time during our recruitment process, please let your Talent Acquisition Partner know.

Additional information

The Magnum Ice Cream Company is an Equal Opportunity Employer. We embrace diversity and are committed to creating an inclusive environment where everyone can do their best work regardless of age, disability, gender identity, race, religion, sexual orientation, or any other protected characteristic.