Experteer Overview As a CSIRT Engineer at Glovo, you will defend and shape our security posture by proactively hunting threats and building automated response capabilities. You will join a Cyber Defense team to improve detection, incident response, and readiness through playbooks and tooling. This role emphasizes automation, high-fidelity alerts, and cross-functional collaboration to protect Glovo’s ecosystem at scale. You’ll operate at the intersection of DFIR, threat hunting, and cloud security to drive a proactive security culture.Compensaciones / Beneficios
- Serve as the first responder for security incidents and conduct DFIR investigations
- Design and maintain incident response playbooks and methodologies
- Develop and tune high-fidelity, low-noise alerts from raw logs
- Build tooling and automation to support incident response (SOCless ambitions)




- Proactively hunt threats across the infrastructure and research emerging threats
- Manage security log ingestion tools and SIEM for full visibilityResponsabilidades
- Experience in Incident Response and Digital Forensics (plus)
- Operational experience with AWS (desirable)
- Proficiency in Python or Golang for automation
- Strong detection engineering and alert tuning skills
- Curiosity and knowledge of Threat Hunting and MITRE ATTu0026CK framework
- Good written and verbal communication skillsRequisitos principales
- Top-notch private health insurance
- Monthly Glovo credit
- Discounts on transportation and food
- Discounted gym memberships
- Adaptable work options (work from home 2 days/week, up to 3 weeks abroad)
- Enhanced parental leave and nursery

📌 Cyber Defence (Barcelona)
🏢 Glovo
📍 Barcelona