Experteer Overview As a CSIRT Engineer at Glovo, you will defend and shape our security posture by proactively hunting threats and building automated response capabilities.

You will join a Cyber Defense team to improve detection, incident response, and readiness through playbooks and tooling.

This role emphasizes automation, high-fidelity alerts, and cross-functional collaboration to protect Glovo’s ecosystem at scale.

You’ll operate at the intersection of DFIR, threat hunting, and cloud security to drive a proactive security culture.

Compensaciones / Beneficios• Serve as the first responder for security incidents and conduct DFIR investigations• Design and maintain incident response playbooks and methodologies• Develop and tune high-fidelity,



low-noise alerts from raw logs• Build tooling and automation to support incident response (SOCless ambitions)• Proactively hunt threats across the infrastructure and research emerging threats• Manage security log ingestion tools and SIEM for full visibility

Responsabilidades• Experience in Incident Response and Digital Forensics (plus)• Operational experience with AWS (desirable)• Proficiency in Python or Golang for automation• Strong detection engineering and alert tuning skills• Curiosity and knowledge of Threat Hunting and MITRE ATTu0026CK framework• Good written and verbal communication skills

Requisitos principales• Top-notch private health insurance• Monthly Glovo credit• Discounts on transportation and food• Discounted gym memberships• Adaptable work options (work from home 2 days/week, up to 3 weeks abroad)• Enhanced parental leave and nursery

📌 Cyber Defence & Incident Response Engineer (They/She/He) (Barcelona)
🏢 Glovo
📍 Barcelona