Security Incident Response Analyst — Remote & Flexible Hours

Axpo Group; Madrid; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Meal allowances

Internet compensation

Training courses

Gym coverage

Health insurance

Flexible working hours

Remote work option

Job summary

Axpo Group is seeking a hands-on security professional to detect, analyze, and respond to incidents across a complex environment in Madrid. You will triage alerts, lead technical incident analyses, and coordinate containment with IT and partners.

You will hunt threats, improve playbooks, and serve as a key escalation contact for security incidents, while collaborating with a close-knit security team and Group IT.

Qualifications

• Hands-on experience in security operations, incident response, or SOC analyst roles.
• Knowledge of incident handling methodologies, ideally MITRE ATT&CK and NIST SP 800-61.
• Experience with SIEM, EDR, and network/endpoint analysis tools.
• Familiarity with Windows, Linux, and cloud environments such as Azure.
• Strong analytical mindset and calm under pressure.
• Scripting or automation skills (Python, PowerShell, or KQL) and experience in regulated or critical infrastructure environments.

Responsibilities

• Monitor and triage security alerts from SIEM, EDR, and other detection platforms, identifying genuine threats early.
• Lead the technical analysis of confirmed incidents, determining scope, impact, and root cause.
• Coordinate containment, eradication, and recovery activities with IT, business teams, and external partners.
• Perform proactive threat hunting and analyze attacker techniques using MITRE ATT&CK frameworks.
• Maintain and improve incident response playbooks, runbooks, and post-incident review processes.
• Act as a point of contact for security incident escalations, communicating with technical and non-technical stakeholders.

Skills

Security operations

Incident response

SOC analyst

MITRE ATT&CK

NIST SP 800-61

SIEM

EDR

Network analysis

Endpoint analysis

Windows

Linux

Azure

Scripting

Tools

SIEM

EDR

Job description

Axpo Group is seeking a hands-on security professional to detect, analyze, and respond to incidents across a complex environment in Madrid. You will triage alerts, lead technical incident analyses, and coordinate containment with IT and partners.

You will hunt threats, improve playbooks, and serve as a key escalation contact for security incidents, while collaborating with a close-knit security team and Group IT.