> Markdown version of [/jobs/ext/2882813-security-monitoring-analyst](https://www.wearedevelopers.com/jobs/ext/2882813-security-monitoring-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Monitoring Analyst

- **Company:** AXA Group
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Red Team (Cyber Security), Kusto Query Language, Security Information and Event Management, Data Logging
- **Published:** September 13, 2026
- **Apply:** https://www.buscojobs.com.es/security-monitoring-analyst-en-madrid-ID-371118459

## About the Role

Compensaciones / Beneficios * Author complex KQL queries to detect sophisticated behaviors * Analyze raw telemetry from EDR, identity providers, and cloud infra to identify data gaps and improve logging policies * Tune rules to minimize false positives and prevent SOC noise * Validate new detections via targeted validation attacks and technique mapping to MITRE ATTu****CK * Perform gap analyses to uncover blind spots and drive remediation * Translate threat intelligence and red team techniques into actionable detection logic * Review and optimize the detection rule library for accuracy and coverage * Collaborate with Incident Response to understand and prevent recurrence of missed attacks Responsabilidades * Experience as a Red Teamer or in offensive security * Strong knowledge of attacker techniques and how to bypass detections * Ability to author high-fidelity SIEM detections and understand telemetry needs * Hands-on experience with log data from EDR, identity providers, and
cloud platforms * Familiarity with MITRE ATTu****CK mapping and validation of detections Requisitos principales *

## Description

Experteer Overview As a Detection Strategist in AXA's Security Operations Center, you shape high-fidelity detections by translating attacker behavior into durable rules.You bridge offensive tradecraft with SOC outcomes, owning detection content and guiding telemetry needs to improve visibility.Your work focuses on crafting advanced KQL-based alerts, reducing false positives, and collaborating with incident response to close gaps.This role offers impact at scale within a global, tech-driven security team.Compensaciones / Beneficios * Author complex KQL queries to detect sophisticated behaviors * Analyze raw telemetry from EDR, identity providers, and cloud infra to identify data gaps and improve logging policies * Tune rules to minimize false positives and prevent SOC noise * Validate new detections via targeted validation attacks and technique mapping to MITRE ATTu****CK * Perform gap analyses to uncover blind spots and drive remediation * Translate threat intelligence and red team techniques into actionable detection logic * Review and optimize the detection rule library for accuracy and coverage * Collaborate with Incident Response to understand and prevent recurrence of missed attacks Responsabilidades * Experience as a Red Teamer or in offensive security * Strong knowledge of attacker techniques and how to bypass detections * Ability to author high-fidelity SIEM detections and understand telemetry needs * Hands-on experience with log data from EDR, identity providers, and cloud platforms * Familiarity with MITRE ATTu****CK mapping and validation of detections Requisitos principales *


## Related Videos

- [From Tables to Graphs in Minutes: Supercharging Kusto Graph Analytics with AI-Powered Development](https://www.wearedevelopers.com/videos/1543-from-tables-to-graphs-in-minutes-supercharging-kusto-graph-analytics-with-ai-powered-development)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Introduction to Responsible AI: Balancing Value and Risk](https://www.wearedevelopers.com/videos/1972-introduction-to-responsible-ai-balancing-value-and-risk)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [PET ARENA Season 2.](https://www.wearedevelopers.com/videos/100237-pet-arena-season-2)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)