ph3Overview /h3 pA leading international retailer with more than 575,000 employees worldwide in 33 different countries and over 13,700 stores, has established an IT HUB in Barcelona as part of its IT division, responsible for the selection and provision of IT infrastructure, IT platforms and business applications. /p pWith our agile mentality we are looking for people that are willing to make an impact on projects and solutions used worldwide by millions of customers. /p pAgrupa Integral Talent collaborates with our client to attract the best talent for its ITHUB located in Barcelona. We are looking for open-minded colleagues with passion for technology. We offer you diverse and exciting career opportunities in a dynamic work environment that stands for development and progress. Elevate your career with us, where development and progress are at the heart of everything we do. /p pIf you feel ready and think this opportunity is for you, we would be happy to meet you. /p h3Your Tasks /h3 ul liCoordinate and communicate IT security incidents across teams and countries, managing the incident response process. /li liDetect and analyze potential security incidents, ensuring effective containment. /li liReconstruct cyber-attacks and malware, analyze sensitive data, and derive remediation actions. /li liDevelop mechanisms to detect anomalies and attacks, initiating preventive measures to alert in time. /li liMonitor the general threat landscape on the Internet and provide actionable recommendations. /li liAdvise internal projects on security-related issues. /li liConduct IT forensic investigations. /li liCreate meaningful reports on IT security incidents. /li /ul h3Job Requirements /h3 ul liOur client’s Cyber Defense Center is fully built and up and running.



We are now looking to strengthen the team with an Incident Response expert to cover the weekday afternoon shift. This is a hands‑on, experienced technical role focused on advanced incident, and continuous improvement rather than tier‑one alert triage. /li liYou will join a large Cyber Security organization with excellent opportunities for growth, development, and promotion based on performance and training. Continuous learning is essential in this field, and the company supports this with a wide range of education and training options to enhance both soft and hard skills. /li li5+ years of professional experience in Incident Response, leading medium to critical security incident response. /li liHands‑on experience in incident response, including triage, containment, remediation, and end‑to‑end security investigations. /li liExperience partnering with Escalation Management, Product Development/Engineering, IT, Legal, Cloud Ops, and wider cybersecurity teams to lead remediation. /li liUniversity degree in Information Technology or comparable education. /li liStrong English skills, fluent business English (speaking and writing) at advanced level (B2+). /li liFurther education in IT forensics and security incident management. /li liExpert knowledge in SIEM systems (preferably Splunk), SOAR tools, and EDR solutions. /li liStrong technical expertise in deployed technologies and cyber attack techniques. /li liKnowledge of national and international IT standards and frameworks (ISO 27001,



NIST Cyber Security Framework, BSI Grundschutz, ITIL, OWASP, MITRE ATTCK). /li liHigh communicative and analytical skills, ability to work independently, and strong team spirit. /li liConfidence and persuasiveness, with communication skills in both German and English. /li liCommitment to continuous education and professional development. /li liWould be a plus: Strong digital forensics skills, including analysis, timeline reconstruction, and interpreting artefacts across Windows, macOS, Linux, and cloud environments. /li liWould be a plus: Experience in cloud incident response including familiarity with cloud‑native logging, identity systems, and investigation techniques. /li liWould be a plus: Knowledge of application security, including investigating application‑layer attacks, abuse cases, and SaaS‑specific threats. /li /ul h3Shift Options /h3 ul liMorning shift (5:45 – 14:00h), from Monday to Friday (no rotation). /li liAfternoon shift (13:45 – 22:00h), from Monday to Friday (no rotation). /li /ul h3What We Offer /h3 ul liThese are hybrid mode permanent positions. 2 days/week at the office. /li liYou will be part of an international team composed of people from different countries and backgrounds, where you’ll be able to share your experience and knowledge to achieve teamwork and meet the objectives. /li liOn top of this, you’ll have a personal follow‑up with your management team to help you understand all business‑related questions and guide you in your professional career. /li liWe offer a competitive compensation and benefits package: lunch vouchers, health and dental insurance, transport, wellbeing, etc. /li /ul h3Contact /h3 pIf you are interested, please apply directly or send your CV to /p /p #J-18808-Ljbffr

📌 Cybersecurity incidence response senior analyst (SOC/for an international IT Hub (Barcelona)
🏢 Agrupa Global Talent
📍 Barcelona