Threat Intelligence & Detection Engineer

About The Magnum Ice Cream Company

With a global presence spanning 76 countries and a team of 19,000 dedicated experts, The Magnum Ice Cream Company leads the ice cream industry with renowned brands such as Wall's, Cornetto, and Ben & Jerry's. We aspire to bring joy to millions by creating iconic ice cream experiences and pride ourselves on a fast-moving, simple, and collaborative work culture that values ownership, integrity, and innovation, including the use of digital tools and AI to enhance our work.

Role Overview

We are looking for a seasoned Threat Intelligence & Detection Engineer to join our team in Pune/Pimpri-Chinchwad. This role will involve developing and maintaining cyber threat intelligence functions, detection engineering, threat hunting, and security automation. You will transform threat intelligence insights into actionable security measures through advanced detection rules, threat hunting, automation workflows, and operational reporting. You will report to the Head of Security Operations.

Key Responsibilities

• Monitor and analyze cyber threats, threat actors, vulnerabilities, and attack methods relevant to our environment.
• Manage partnerships with cyber threat intelligence (CTI) providers and external intelligence collaborators, ensuring validation and operational use of intelligence.
• Enhance detection coverage, threat hunting, and Security Operations Center (SOC) monitoring capabilities through intelligence-driven strategies.
• Create and optimize Microsoft Sentinel detection rules, analytic queries (KQL), workbooks, watchlists, and correlation logic.
• Develop detection mechanisms across cloud, identity, endpoint, email, SaaS, network, and operational technology (OT) environments.
• Align detection efforts with MITRE ATT&CK techniques and oversee the end-to-end detection lifecycle.
• Perform proactive threat hunting using platforms like Microsoft Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, and Azure.
• Formulate threat hunting hypotheses and translate findings into operational detections and monitoring enhancements.
• Design, implement, and maintain Palo Alto XSOAR playbooks, automations, integrations, workflows, and dashboards.
• Automate workflows related to threat enrichment, investigation, containment, and response.
• Produce security metrics, reports, dashboards, threat intelligence summaries, and SOC performance insights.
• Collaborate with Managed Security Service Providers (MSSP) and Managed Detection and Response (MDR) providers to improve monitoring and facilitate new security technology integration.
• Ensure governance, audit readiness, documentation, and traceability from initial threat identification through detection and response.
• Continuously improve detection capabilities informed by incident analysis and lessons learned.
• Support OT threat detection initiatives using tools such as CrowdStrike, Claroty, and OT telemetry data sources.

Required Experience and Expertise

• Eight to ten years of experience in cyber threat intelligence, detection engineering, threat hunting, security operations, or cyber defense roles.
• Expertise in Microsoft Sentinel, Defender XDR, and advanced Kusto Query Language (KQL) development.
• Proven experience creating Sentinel analytics rules, hunting queries, workbooks, and detection content.
• Hands-on knowledge of Palo Alto XSOAR for playbook creation, automation workflows, integrations, dashboards, and reporting.
• Experience collaborating with MSSPs, MDR providers, and CTI service providers.
• Ability to consume and operationalize intelligence from commercial platforms and external partners.
• Familiarity with CrowdStrike, Claroty, Microsoft Defender, and enterprise detection platforms is a plus.

Desired Skills and Competencies

• In-depth understanding of MITRE ATT&CK framework and adversary behavior analysis.
• Strong detection engineering and threat hunting capabilities.
• Advanced skills in KQL development and log analytics.
• Effective stakeholder engagement and relationship management abilities.
• Experience working closely with MSSPs, MDRs, CTI vendors, and external security collaborators.
• Excellent presentation and reporting skills.

Preferred Professional Certifications

• SC-200 (preferred)
• GCTI (highly desirable)
• GCIH (preferred)
• GCDA (desirable)
• GMON (desirable)
• Palo Alto XSOAR Engineer Certification (highly desirable)
• CISSP (desirable)

Benefits and Rewards

• Competitive market salary with performance-based incentives.
• Flexible working arrangements.
• Comprehensive support for health, wellbeing, and work-life balance.
• Paid time off for rest and rejuvenation.
• Continuous learning and professional development opportunities.
• Additional benefits may vary based on location.

Additional Information

The Magnum Ice Cream Company is committed to creating a diverse and inclusive workplace where everyone has the opportunity to excel regardless of age, disability, gender identity, race, religion, sexual orientation, or other protected attributes. We encourage applications from all qualified individuals. If you require assistance during the recruitment process due to a disability, please inform your Talent Acquisition Partner.

Why Join Us?

• Work in a passionate and fast-paced environment focused on growth both personally and professionally.
• Operate with real accountability and make a meaningful impact.
• Enjoy an inclusive culture marked by low ego and hierarchy.
• Opportunity to innovate, take ownership, and push boundaries with digital and data-driven insights.
• Reward and recognition tied to performance and contribution.