ppSelect how often (in days) to receive an alert: Create Alert /ppBME - Bolsas y Mercados Españoles - drives the transformation of financial markets and belongs to SIX, the third largest exchange group in Europe. /ppWhat sets us apart drives us ahead: between local roots and integral relevance, we are a unique blend of tradition and future, of foundation and growth. We value bright minds and inspire them to grow with their ideas. Come and shape the future of finance with us. /ph3bSecurity Incident Responder /b /h3pMadrid | Working from home up to 40% | Reference 8166 /ppThe Security Operations Center (SOC) is a critical Line of Defense 1 function at SIX, responsible for detecting, investigating, and responding to cyber threats across endpoint, identity, network, cloud, and email environments. We are looking for a hands-on security professional with experience in incident response, threat hunting, and security monitoring. In this role, you will investigate complex alerts, develop and tune detection use cases, support containment and remediation efforts, improve automation and playbooks, and proactively identify threats to strengthen SIX's overall security posture. /ph3What You Will Do /h3ulliDevelop, tune, and maintain threat detections and SIEM use cases across endpoint, network, identity, cloud, mail, and M365 environments. /liliInvestigate complex security incidents, lead threat analysis, and coordinate containment and remediation activities. /liliDesign and improve detection content, SOC automation, SOAR workflows, and incident response playbooks. /liliConduct proactive threat hunting using threat intelligence and the MITRE ATTCK framework.



/liliIdentify detection gaps and continuously enhance SOC capabilities and security posture. /liliMentor junior analysts and contribute to SOC process improvements and knowledge sharing. /li /ulh3What You Bring /h3ulli5+ years of experience in SOC operations, detection engineering, threat hunting, and incident response. /liliHands-on experience with SIEM, EDR, and SOAR platforms (preferably Sentinel, Elastic, Defender for Endpoint, and Cortex XSOAR). /liliStrong background in detection rule development, security investigations, and threat hunting across multiple telemetry sources. /liliExperience with scripting, automation, APIs, and tools such as Python, GitLab, Azure DevOps, and CI/CD practices. /liliKnowledge of security query languages and frameworks, including MITRE ATTCK. /liliStrong analytical, communication, collaboration, and mentoring skills. /li /ulpIf you have any questions, bcheck out our FAQ page /bor call Sara Perez de la Cuesta at . /ppbFor this vacancy we only accept direct applications in English. /b /ppDiversity is important to us. Therefore, we are looking to receiving applications regardless of any personal background. /ph3What We Offer /h3pbFlexible Work Models /bbr/We trust our employees and offer a work environment that is well-balanced, productive and fosters success. /ppbPersonal Development /bbr/You will benefit from a culture of continuous learning and feedback. Your personal growth is supported through an extensive learning offering. /ppbAgile Working Methods /bWhether through scrum or design thinking,br/we solve exciting tasks together in teams. /p /p #J-18808-Ljbffr

📌 Security Incident Responder (Madrid)
🏢 Six Group Services
📍 Madrid