- Lead advanced incident response investigations, particularly involving cloud infrastructure and platform environments.
- Analyse, contain, eradicate and recover from security incidents escalated from SOC and L2 teams.
- Develop and improve incident response playbooks, detection rules and escalation procedures.
- Manage and enhance security tooling such as SIEM, EDR and threat intelligence platforms.
- Operationalise threat intelligence to strengthen detection and response capabilities.
- Collaborate with security and engineering teams to improve processes, automation and security monitoring.
- Participate in on-call rotations and contribute to post-incident reviews and continuous improvement initiatives.

• Lead complex cloud security investigations. • Work with modern security engineering and automation.

- 4+ years of experience in Security Engineering, SOC or Incident Response roles.
- Strong hands-on experience managing security incidents across the full incident response lifecycle.
- Proven expertise with SIEM, EDR, threat intelligence and security monitoring technologies.
- Good knowledge of AWS security services, IAM, Security Groups and cloud security best practices.
- Experience with GitOps, automation, CI/CD pipelines and security-as-code approaches.
- Familiarity with Kubernetes, GitHub, Infrastructure as Code and modern cloud environments.
- Strong analytical and problem-solving skills with the ability to lead complex investigations.




- Experience working with security frameworks such as MITRE ATT&CK; or NIST.
- Fluent English and ability to collaborate effectively across multiple teams.
- Passion for cybersecurity, continuous improvement and defensive security operations.

A leading European digital marketplace company that operates large-scale online platforms across multiple sectors, connecting millions of users and businesses every month. The organisation is highly technology-driven, with a strong focus on cloud infrastructure, platform scalability, security, and innovation.

The company offers an international environment where engineering teams work with modern technologies and best practices to build secure, high-availability products that impact users across multiple markets.

- Opportunity to join a leading international technology company with large-scale cloud environments.
- Exposure to complex, high-impact security incidents and advanced cloud security challenges.
- Work with modern technologies, including AWS, Kubernetes, GitOps, CI/CD and security automation.
- Join a collaborative and highly skilled security team with strong engineering standards.
- Influence detection, response and security strategy across a general organisation.
- Continuous learning and professional development within a mature cybersecurity function.
- Competitive compensation and benefits package in an international environment.

📌 Defensive Security Engineer (Barcelona)
🏢 Michael Page
📍 Barcelona