> Markdown version of [/jobs/ext/3018925-security-monitoring-analyst](https://www.wearedevelopers.com/jobs/ext/3018925-security-monitoring-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Monitoring Analyst

- **Company:** AXA Group
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Unix, Cloud Computing Security, Cyber Security, Email Filtering, Intrusion Detection and Prevention, Intrusion Detection Systems, Network Security, ArcSight SIEM Tool, Data Driven Tests, Security Information and Event Management, Software Vulnerability Management, Computer Network Technologies, QRadar, Firewalls (Computer Science), Information Technology, ArcSight Event Correlation, Splunk
- **Published:** September 21, 2026
- **Apply:** https://www.recruit.net/job/security-monitoring-analyst-jobs/E2031D4A31927040

## About the Role

* Bachelor's degree in computer science,Engineering, Information Technology or equivalent experience
 * 3-5 years in security operations or incident response
 * 3+ years in security analysis and SIEM content development
 * Experience in global organizations and security monitoring
 * Knowledge of network technologies, Windows/Unix administration
 * Hands-on experience with network security, vulnerability management and incident response
 * Familiarity with cloud security concepts and tools

 * Analytical thinking
 * Strong communication and presentation skills
 * Attention to detail
 * Security monitoring and analysis tools (e.g., Sentinel, Splunk, QRadar, ArcSight, Google SecOps)
 * Knowledge of firewalls, IDS/IPS, EDR/AV, WAFs, antispam, and event correlation
 * Understanding of security threats and intrusion detection

## Description

In this role you will strengthen AXAs SOC capabilities by enhancing analytics and SIEM content, guiding junior analysts, and supporting incident detection and response. You will work with global security teams to improve intrusion detection and risk mitigation, while maintaining high technical standards and professional communications with stakeholders. This role offers hands-on security operations experience in a large, diverse, tech-driven organization and opportunities to grow through certifications and on-call responsibilities. You will be empowered to shape security outcomes in a fast-evolving threat landscape.

Compensaciones / Beneficios

 * equal opportunities in employment
 * diversity & inclusion
 * global team environment
 * opportunity for professional development
 * on-call experience
 * growth through certifications

Responsabilidades

 * Improve and continuously enhance SOC analytics
 * Maintain and optimize SIEM content (filters, rules, expressions)
 * Mentor First Level Security Analysts
 * Provide data-driven analysis to SOC processes and customers to drive risk mitigation
 * Execute SOC analytical processes and tasks
 * Collaborate with information security teams to strengthen intrusion detection and incident response
 * Autonomously handle high-severity incidents during on-call shifts
 * Communicate and report to SOC stakeholders and customers
 * Pursue ongoing professional development and certifications to stay prepared against evolving threats


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Coffee with Developers - Robby Russell](https://www.wearedevelopers.com/videos/917-coffee-with-developers-robby-russell)

## Related Articles

- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)