Senior SOC Purple Team Lead: Adversary Emulation & Detection

AXA Group; Madrid; Presencial; EUR 85.000 - 120.000; Jornada completa

Descripción de la vacante

AXA Group is seeking a senior SOC Purple Team Expert to unite offensive and defensive teams to enhance prevention, telemetry, detection, investigation, and response globally. You will translate threat intel and incidents into measurable objectives, design safe testing campaigns, and collaborate with detection engineers to improve analytics and telemetry.

You will lead end-to-end SOC readiness efforts, drive automation and testing, and mentor SOC analysts across a distributed, international team.

Formación

• At least 5 years of hands-on experience across offensive security, adversary emulation, detection engineering, threat hunting, incident response, or related disciplines.
• At least 3 years of practical red-team or purple-team experience, including planning and safely executing threat-led exercises in enterprise environments.
• Experience turning test results into improved telemetry, detections, investigation procedures, and remediation.

Responsabilidades

• Threat-led exercise planning: translate threat intelligence into prioritized objectives and measurable success criteria.
• Adversary emulation and control validation: design and execute safe campaigns across endpoints, identity, email, network, and cloud surfaces.
• Detection engineering partnership: collaborate with engineers to validate telemetry, tune analytics, and verify detections and queries.
• End-to-end SOC readiness: assess alert generation, enrichment, triage, escalation, and documentation.
• Remediation and re-testing: record root causes, assign actions, and re-test until outcomes are demonstrated.
• Automation and capability development: build reusable test content, telemetry replay, orchestration, and CI/CD integrations.
• Measurement and reporting: maintain ATT&CK-aligned coverage views and report on detection performance and remediation progress.
• Collaboration and mentoring: run purple-team workshops and coach SOC analysts in adversary behavior and test design.

Conocimientos

Adversary tradecraft

Threat-informed defense

SOC technologies

Emulation frameworks

Detection validation

Engineering and automation

Analysis and communication

Educación

University degree in information security, computer science, or engineering

Herramientas

SIEM

EDR/XDR

SOAR

KQL

Microsoft Sentinel

Defender XDR

APIs

Git

CI/CD

Descripción del empleo

AXA Group is seeking a senior SOC Purple Team Expert to unite offensive and defensive teams to enhance prevention, telemetry, detection, investigation, and response globally. You will translate threat intel and incidents into measurable objectives, design safe testing campaigns, and collaborate with detection engineers to improve analytics and telemetry.

You will lead end-to-end SOC readiness efforts, drive automation and testing, and mentor SOC analysts across a distributed, international team.