About the job
Job purpose
Security Operations Center (SOC) delivers the following capabilities to the AXA entities around the globe: Security Incident Detection, Threat Hunting, Security Incident Response and Threat Intelligence.
As a Job title, your main objective is to:
We believe the best person to write a detection rule is someone who knows exactly how to bypass it.
We are looking for an experienced Red Teamer who wants to pivot into our primary Detection Strategist. You will own the quality and direction of our detection logic: assess our telemetry and logging posture, identify visibility gaps, define detection requirements, and author high-fidelity detection content that holds up against real-world bypass techniques.
You will be the connective tissue between offensive tradecraft and SOC outcomes—translating attacker behavior into durable, actionable detections.
Main missions
Your main responsibility is to ensure that when an adversary moves, we see it. You will spend most of your time inside our SIEM, crafting high-fidelity alerts based on your knowledge of offensive TTPs.




Your responsibilities include:
• Logic Creation: You will author complex KQL queries to detect sophisticated behaviors (e.g., Token manipulation, C2 jitter, etc.) rather than simple IOC matching.
• Telemetry Analysis: You will deeply analyze raw logs from EDR, Identity Providers, and Cloud infrastructure to determine what data is missing and work to enable the right logging policies.
• False Positive Reduction: You will apply your knowledge of "normal" vs. "malicious" administrative behavior to tune existing rules, ensuring the SOC is not flooded with noise.
Secondary Focus: Targeted Adversary Emulation
You will still get your hands on the keyboard to attack, but the goal is different. you are generating data.
• Validation Attacks: You will execute specific, manual attack sequences to verify that a new detection rule triggers.
• Gap Analysis: You will simulate specific techniques (mapped to

📌 Security Monitoring Analyst (Madrid)
🏢 Axa
📍 Madrid