Help us protect Axpo Trading & Sales from evolving cyber threats. In this hands-on role, you'll detect, analyze, and respond to security incidents across a complex, business-critical environment, turning every incident into a lasting improvement.
What you will do:
Monitor and triage security alerts from SIEM, EDR, and other detection platforms, identifying genuine threats early
Lead the technical analysis of confirmed incidents, determining scope, impact, and root cause
Coordinate containment, eradication, and recovery activities with IT, business teams, and external partners
Perform proactive threat hunting and analyze attacker techniques using frameworks such as MITRE ATT&CK
Maintain and improve incident response playbooks, runbooks, and post-incident review processes
Act as a point of contact for security incident escalations, communicating clearly with technical and non-technical stakeholders
What you bring & who you are:
Hands-on experience in security operations, incident response, or SOC analyst roles
Knowledge of incident handling methodologies, ideally including MITRE ATT&CK and NIST SP 800-61
Experience with SIEM, EDR, and network/endpoint analysis tools
Familiarity with Windows, Linux, and cloud environments such as Azure
A strong analytical mindset and the ability to stay calm and structured under pressure
Ideally, scripting or automation skills (Python, PowerShell, or KQL) and experience in regulated or critical infrastructure environments
Even if you don't meet all the requirements, we look forward to your application.
About the team: You'll join a close-knit security team working hand in hand with Group IT, Group CISO, external security providers, and the business. We value open dialogue, mutual support, and diverse perspectives as we build a stronger, more resilient security culture together.
At our company, we strive to create a culture of continuous learning, personal growth, and inter- national community involvement. We're passionate about providing our employees with the tools and resources they need to succeed, and we're confident that you'll love being part of our team!
Working Hours
We offer flexible working hours to accommodate your work schedule. We can work part of our time remotely and the rest at our offices in Madrid, Torre Europa.
Meal allowances
You can enjoy delicious meals on us, no matter if you are working remotely or on-site.
*Option to use it for public transportation or childcare instead.
Internet Compensation
We cover the cost of your home internet connection, as we understand how essential connectivity is in the modern workplace.
Training courses
Our company is committed to helping our employees grow and develop their skills, which is why we offer a variety of industry- specific training courses and a learning channel.
Gym Coverage
Stay active and healthy with our 90% coverage benefit, which provides access to the nearby gym: Forus Selection to keep you energized throughout the day
Health Insurance
We take the health and well-being of our employees seriously, which is why we offer a comprehensive health insurance plan and the option to extend it to your spouse and children.
At Axpo Group, we are dedicated to fostering a culture of non-discrimination, tolerance, and inclusion. As an equal opportunity employer, we welcome applications regardless of race and ethnicity, gender identity and expression, sexual orientation, age, disability, as well as socioeconomic, cultural, and religious background. We are committed to ensuring a respectful and inclusive recruiting process and workplace for everyone.
Atua na operação de segurança cibernética, gerenciando incidentes, analisando logs, contendo ameaças e investigando causas, além de apoiar threat hunting, automação e evolução das ferramentas SIEM e SOAR.
Investigate cyber and fraud incidents across cloud, endpoint, network, and SaaS environments, preserving evidence, identifying attack causes, and strengthening forensic readiness and incident response.
Coordinate responses to mission-critical incidents by triaging and troubleshooting outages, working across product and infrastructure teams, and improving the tools and processes that reduce customer impact.
Lead security investigations and critical incident response, using AI agents, automation, and human judgment to accelerate threat detection, triage, containment, and lasting security improvements across cloud and AI systems.
Own and build detection and response across cloud infrastructure, research environments, and products, from logging and detection engineering to incident response, automation, threat hunting, and recovery.
