Overview As a CSIRT Engineer at Glovo, you will defend and shape our security posture by proactively hunting threats and building automated response capabilities. You will join a Cyber Defense team to improve detection, incident response, and readiness through playbooks and tooling. This role emphasizes automation, high-fidelity alerts, and cross-functional collaboration to protect Glovo’s ecosystem at scale. You’ll operate at the intersection of DFIR, threat hunting, and cloud security to drive a proactive security culture. Compensaciones / Beneficios * Top-notch private health insurance * Monthly Glovo credit * Discounts on transportation and food * Discounted gym memberships * Versátil work options (work from home 2 days/week, up to 3 weeks abroad)



* Enhanced parental leave and nursery Responsabilidades * Serve as the first responder for security incidents and conduct DFIR investigations * Design and maintain incident response playbooks and methodologies * Develop and tune high-fidelity, low-noise alerts from raw logs * Build tooling and automation to support incident response (SOCless ambitions) * Proactively hunt threats across the infrastructure and research emerging threats * Manage security log ingestion tools and SIEM for full visibility Requisitos principales * Experience in Incident Response and Digital Forensics (plus) * Operational experience with AWS (desirable) * Proficiency in Python or Golang for automation * Strong detection engineering and alert tuning skills * Curiosity and knowledge of Threat Hunting and MITRE ATT&CK; framework * Good written and verbal communication skills * Proactivity * Curiosity * Strong communication * AWS * Python or Golang * Threat monitoring and alert tuning

📌 Cyber Defence (Barcelona)
🏢 Glovo
📍 Barcelona