A great career opportunity

Ahold Delhaize Group is one of the world's largest food retail groups and a leader in both supermarkets and e-Commerce. Its family of great, local brands serves more than 50 million customers each week in Europe, the United States and Indonesia. Together, these brands employ more than 420,000 associates in more than 7,000 grocery and specialty stores. Our Ahold Delhaize Group is based in Zaandam in the Netherlands, but Ahold Delhaize Group associates also work in all the countries we serve. This team supports all our great local brands in finance, HR, IT, legal, communications, sustainable retailing, and other key functions. 

Primary Purpose

Ahold Delhaize Group’s Threat Defense Operations (TDO) team is seeking an analyst to support detection engineering and threat monitoring capabilities. The TDO team is responsible for maintaining and enhancing detection and response logic within Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) platforms across a global environment. This role contributes to improving the organization’s ability to detect and respond to evolving cyber threats by leveraging threat intelligence and continuously refining detection use cases. The position includes structured mentorship from senior team members to support professional growth and technical development.

Duties & Responsibilities

• Collaborate with Cyber Threat Intelligence (CTI), Advanced Cyber Engineering (ACE), and Incident Response (IR) teams to incorporate emerging threat intelligence into detection capabilities.
• Assist in developing, tuning, and maintaining detection logic within SIEM and EDR platforms to improve threat visibility and reduce false positives.
• Support the ingestion, parsing, and normalization of log data to ensure accurate and consistent data within the SIEM.
• Participate in validation and testing of detection controls to confirm effectiveness against real-world attack techniques.
• Provide audit and compliance support by gathering and delivering required evidence related to detection and monitoring controls.
• Create, update, and maintain technical and process documentation for detection use cases, workflows, and operational procedures.
• Monitor updates to threat actor tactics, techniques, and procedures (TTPs) and assist in aligning detection strategies with the MITRE ATT&CK framework.
• Work under the guidance of senior team members to develop technical skills and understanding of defensive operations.
• Perform other duties and responsibilities as assigned to support team objectives.

Qualifications

• 1–3 years of experience in cybersecurity, IT, or a related field, or equivalent hands-on training
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience
• Foundational understanding of cybersecurity concepts (e.g., networking basics, logs, threats, and common attack patterns)
• Exposure to SIEM, EDR, or log analysis concepts through academic, lab, or professional experience.
• Strong analytical and problem-solving skills with attention to detail
• Strong written and verbal communication skills in English

Preferred Qualifications

• Exposure to query languages (e.g., KQL, SPL, SQL) or willingness to learn.
• Basic understanding of DevOps or Infrastructure-as-Code concepts (e.g., Terraform) and interest in automation.
• Familiarity with the MITRE ATT&CK framework.
• Experience in a Security Operations Center (SOC), Managed Security Service Provider (MSSP), internship, or hands-on lab environment.
• Exposure to SIEM platforms (e.g., Microsoft Sentinel, Splunk) or endpoint detection tools.
• Expierence in grocery retail 

The Ahold Delhaize Group sets global strategies frameworks, facilitates the sharing of best practice and encourages economies of scale. Great examples include sharing technology and digital know-how, so we can continue to lead in online and in-store retailing, setting global targets for healthy and sustainable products-including reducing food waste, use of plastics and making our products healthier to use and eat, and championing development for our future leaders-from learning about the digital mindset to leading our stores of the future. 

We are an equal opportunity employer. We comply with all applicable federal, state and local laws. Qualified applicants are considered without regard to sex, race, color, ancestry, national origin, citizenship status, religion, age, marital status (including civil unions), military service, veteran status, pregnancy (including childbirth and related medical conditions), genetic information, sexual orientation, gender identity, legally recognized disability, domestic violence victim status or any other characteristic protected by law.