SOC Analytics Lead & Incident Response

AXA Group Operations; Madrid; Presencial; EUR 42.000 - 66.000; Jornada completa

Descripción de la vacante

AXA Group Operations is seeking an experienced Security Operations professional to build on and continuously improve SOC analytics and SIEM content. The role involves mentoring First Level Security Analysts, performing professional data analysis, and supporting intrusion detection and incident response across the organization.

You will collaborate with global security teams, communicate findings to stakeholders, and maintain technical capabilities through ongoing certifications to stay ahead of

Formación

• Bachelor-level degree in computer science, engineering, information technology or equivalent experience
• MSc in Information Security is desirable but not essential
• Certifications such as CISSP or GCFA/GNFA are a plus but not mandatory
• 3-5 years in a security operations or incident response role
• Experience in security analysis and SIEM content development >3 years
• Experience in a global organization >3 years

Responsabilidades

• Build on and continuously improve SOC analytics
• Ensure effective operation of SIEM content (filters, rules, expressions, ...) used within the SOC
• Mentor and guide the First Level Security Analysts
• Provide professional data analysis within the SOC processes and to SOC customers
• Perform and maintain SOC-related analytical processes and tasks
• Work closely with other Information Security teams to ensure effective intrusion detection and incident response
• Handle high severity incidents autonomously during on-call hours
• Communicate and report to SOC stakeholders and customers
• Maintain and improve technical capabilities through training and certifications

Conocimientos

Fluent in English

Analytical thinking

Communication skills

Team player

Problem solving

Educación

Bachelor's degree in CS/IT or related field

MSc Information Security desirable

Security certifications (CISSP/GCFA/GCDA)

Herramientas

Splunk

Sentinel

QRadar

ArcSight

Windows/Unix administration

Cloud security tools

Descripción del empleo

AXA Group Operations is seeking an experienced Security Operations professional to build on and continuously improve SOC analytics and SIEM content. The role involves mentoring First Level Security Analysts, performing professional data analysis, and supporting intrusion detection and incident response across the organization.

You will collaborate with global security teams, communicate findings to stakeholders, and maintain technical capabilities through ongoing certifications to stay ahead of