Responsibilities
- Support digital forensics and incident response investigations into security breaches and anomalies.
- Design and maintain incident-response playbooks and investigation methodologies.
- Create, validate, and fine-tune security alerts for high-fidelity, low-noise detection.
- Build automation and orchestration tooling to reduce manual incident-response work.
- Research emerging threats and conduct threat-hunting exercises across the infrastructure.
- Support management of security log-ingestion tools and SIEM systems to maintain visibility.

Requirements
- Experience in incident response and digital forensics is a plus.
- Operational experience with AWS and cloud-native security logs is desirable.
- Experience with Python or Golang for automating responses and building security tooling.
- Knowledge of threat monitoring, alert tuning, and detection engineering.
- Understanding of threat hunting and the MITRE ATT&CK; framework.




- Good written and verbal communication skills for incident documentation and post-mortems.
- Relevant certifications such as GCIH, GCFA, GNFA, or AWS Certified Security - Specialty are nice to have.
- Experience with SOAR platforms is nice to have.
- Knowledge of data privacy regulations and security protocols related to data breaches is nice to have.

Benefits
- Private health insurance.
- Monthly Glovo credit and discounts on transportation, food, and kindergarten expenses.
- Discounted gym memberships.
- Extra time off and enhanced parental leave.
- Hybrid work with the freedom to work from home two days per week.
- Opportunity to work from anywhere for up to three weeks per year.
- Office-based nursery, online therapy, and wellbeing benefits.

📌 Cyber Defence (España)
🏢 Delivery Hero
📍 España