Cyber Defence & Incident Response Engineer

About the role

Glovo, part of the Delivery Hero Group, is looking for a CSIRT Engineer to join its Cyber Defense team in Barcelona. The role protects the company's ecosystem and contributes to a "SOCless" future through high-level automation and sophisticated detection engineering.

Key responsibilities

• Support Digital Forensics and Incident Response (DFIR) investigations of security breaches and anomalies
• Design and maintain playbooks and investigation methodologies
• Create, validate and tune alerts so that raw logs become actionable intelligence
• Build tooling and automation for incident response
• Conduct threat hunting across the infrastructure
• Work with the management of security log ingestion tools and SIEM to ensure full visibility

Required profile

• Incident Response and Digital Forensics experience (a plus)
• Curiosity to learn threat hunting, including the MITRE ATT&CK framework
• Good written and communication skills for post-mortems and incident documentation

Required skills

• Desirable: AWS operational experience
• Desirable: Python or Golang to automate responses and build security tooling
• Desirable: alert tuning and detection engineering
• Nice to have: GCIH, GCFA, GNFA or AWS Certified Security - Specialty certification
• Nice to have: SOAR platforms, knowledge of data privacy regulations and breach protocols

What we offer

• Private health insurance
• Monthly Glovo credit
• Discounts on transport, food and kindergarten, and discounted gym memberships
• Extra time off, two days of work from home per week and up to three weeks working from anywhere a year
• Enhanced parental leave and an office-based nursery
• Online therapy and wellbeing benefits