Overview

As a Cybersecurity Incident Responder, you lead and support incident response and digital forensics across endpoints, identities, networks, and cloud. You work with SOC, infrastructure, and application teams to minimize business impact and drive improvements in detection and response. You will manage major incidents, participate in on-call rotations, and help shape repeatable playbooks and use cases.

This role offers meaningful impact by protecting information systems and data at scale, with a strong emphasis on collaboration and rapid problem-solving.

Compensaciones / Incentivos Flexible working conditions

Life and accident insurance

Health insurance at a competitive price

Investment in your learning and development

Gym membership discounts

Responsabilidades Monitor and analyze security infrastructure to identify threats and incidents

Lead critical security incident investigations

Escalate ownership during major incidents and participate in on-call rotations

Analyze logs, network traffic, and data sources to determine root causes

Improve incident detection and response workflows and playbooks

Collaborate cross-functionally to implement and refine use cases and procedures

Serve as escalation point for analysts on the team

Evaluate and recommend new tools to boost IR capabilities





Preserve evidence and perform digital forensics operations on endpoints (logs, memory, images)

Requisitos principales 5+ years hands-on incident response experience

Hands-on digital forensics experience with evidence collection and analysis from endpoints

Experience in at least two: Malware Analysis, Cloud Security, Vulnerability Management, or Operational Technology

Scripting experience (Python, PowerShell, or Bash)

Solid understanding of Linux and Windows architectures, networking, and packet analysis

Experience with firewalls, IDS/IPS, anti-malware, SIEM, and EDR tools

Strong problem-solving skills and ability to work under high-severity pressure

Excellent written and verbal communication for documenting findings and presenting recommendations

Advanced knowledge of common attack techniques (exploits, network attacks, phishing, malware)

Knowledge of integrating AI/LLM capabilities into IR (plus)

Red Team experience (plus)

AWS knowledge (plus)

Security certifications (CRTO, OSCP, GCIH, GCFA, GEIR) (plus)

Strong communication (written and verbal)

Composure under pressure

Collaboration and teamwork

Incident response

Digital forensics

Malware analysis

📌 Digital Forensic and Cybersecurity Incident Responder (Barcelona)
🏢 Boehringer Ingelheim
📍 Barcelona