About The Job
Cyber Defence
Within Group Security, the Cyber Defense department provides the entities and markets with first line of defense services. Under Cyber Defense, Security Operations Center (Security Operations Centre) is designed to prevent, detect, and react to cyber threats.

Position Main activities
Security Operations Center (SOC) delivers the following capabilities to the AXA entities around the globe: Security Incident Detection, Threat Hunting, Security Incident Response and Threat Intelligence.

The SOC Purple Team Expert is a senior, hands-on practitioner who brings offensive and defensive teams together to measurably improve prevention, telemetry, detection, investigation, and response.

Main missions
Your Responsibilities Include
- Threat-led exercise planning: Translate threat intelligence, recent incidents, material business risks, and detection-coverage gaps into prioritized hypotheses, exercise objectives, rules of engagement, and measurable success criteria.
- Adversary emulation and control validation: Design and execute safe,



authorized campaigns and atomic tests across endpoint, identity, email, network, and cloud attack surfaces. Emulate relevant adversary behaviors and map activity to MITRE ATT&CK; techniques.
- Detection engineering partnership: Work directly with detection engineers and threat hunters to validate telemetry, create and tune analytics, reduce blind spots and false negatives, and verify the quality of KQL queries, correlation rules, and behavioral detections.
- End-to-end SOC readiness: Assess whether alerts are generated, enriched, triaged, escalated, investigated, contained, and documented as intended. Exercise both technical controls and operational procedures, including automated response playbooks.
- Remediation and re-testing: Record evidence and root causes, agree practical actions with control owners, prioritize findings by threat relevance and business impact, track closure, and independently re-test until the e

📌 Security Monitoring Analyst (Madrid)
🏢 Axa Group Operations
📍 Madrid