Overview As a CSIRT Engineer at Glovo, you will defend and shape our security posture by proactively hunting threats and building automated response capabilities. You will join a Cyber Defense team to improve detection, incident response, and readiness through playbooks and tooling.

This role emphasizes automation, high
-fidelity alerts, and cross-functional collaboration to protect Glovo’s ecosystem at scale.

You’ll operate at the intersection of DFIR, threat hunting, and cloud security to drive a proactive security culture.

Compensaciones / Ventajas

- Top-notch private health insurance
- Monthly Glovo credit
- Discounts on transportation and food
- Discounted gym memberships
- Flexible work options (work from home 2 days/week, up to 3 weeks abroad)
- Enhanced parental leave and nursery Responsabilidades
- Serve as the first responder for security incidents and conduct DFIR investigations
- Design and maintain incident response playbooks and methodologies




- Develop and tune high-fidelity, low-noise alerts from raw logs
- Build tooling and automation to support incident response (SOCless ambitions)
- Proactively hunt threats across the infrastructure and research emerging threats
- Manage security log ingestion tools and SIEM for full visibility Requisitos principales
- Experience in Incident Response and Digital Forensics (plus)
- Operational experience with AWS (desirable)
- Proficiency in Python or Golang for automation
- Strong detection engineering and alert tuning skills
- Curiosity and knowledge of Threat Hunting and MITRE ATT&CK; framework
- Good written and verbal communication skills
- Proactivity
- Curiosity * Strong communication
- AWS * Python or Golang
- Threat monitoring and alert tuning

📌 Cyber Defence & Incident Response Engineer (They/She/He) (Barcelona)
🏢 Glovo
📍 Barcelona