Experteer Overview
In this role you defend Glovo’s ecosystem as a CSIRT Engineer within the Cyber Defense team. You will lead DFIR investigations, design incident-ready playbooks, and fine-tune alerts to deliver actionable signals with high fidelity. You’ll drive SOCless automation and threat hunting to stay ahead of threats across our infrastructure. You collaborate across teams to ensure visibility through SIEM/log ingestion tooling, shaping a proactive security posture. This is a hands-on, impact-focused opportunity in a fast-growing tech company.

Compensaciones / Incentivos
• Be the First Responder for DFIR investigations following the Cyber Incident Response Cycle
• Architect Readiness by designing and maintaining playbooks and investigation methodologies
• Precision Monitoring: create, validate, and tune alerts to reduce noise and improve actionable insights
• Automate u0026 Orchestrate: build tooling and automation for incident response to reduce manual toil
• Hunt the Threat:



conduct threat hunting and research emerging threats across the infrastructure
• Manage the Pipeline: work with security log ingestion tools and SIEM to ensure full visibility across Glovo

Responsabilidades
• Experience in Incident Response and Digital Forensics (IR/DFIR) is a plus
• Desirable AWS operational experience and cloud-native log tracking
• Python or Golang coding for automating responses and building security tooling
• Strong detection engineering skills for monitoring and alert tuning
• Proactivity and curiosity with Threat Hunting and MITRE ATTu0026CK framework understanding
• Clear written and verbal communication for post-mortems and incident documentation

Requisitos principales
• Private health insurance
• Monthly Glovo credit
• Discounts on transport, food, and kindergarten
• Discounted gym memberships
• Extra time off and hybrid/remote work options
• Enhanced parental leave and nursery

📌 Cyber Defence & Incident Response Engineer (They/She/He) (Barcelona)
🏢 Delivery Hero
📍 Barcelona