Senior Security Incident Responder

Are you an experienced Incident Responder who loves handling real cyber incidents and understanding how attackers think? Then this role could be for you.

You’ll join the Incident Response team within the global Cyber Defense Center of a leading international financial services group. The team sits at the front line of protecting the organisation against sophisticated cyber threats. You’ll work on high-impact incidents, partner with experts in threat intelligence, detection and security operations, and play a key part in strengthening the overall security posture.

You thrive in fast-moving environments, take ownership when things get critical, and keep looking for ways to improve how incidents are detected, investigated and resolved. If real-world impact and a highly skilled, collaborative team sound good to you, we’d love to hear from you.

What you’ll do

- Lead and coordinate security incident response in a diverse, multicultural and globally distributed environment, engaging technical and non-technical stakeholders through every phase of an incident
- Collect and analyse data from multiple sources during investigations and report findings clearly and with actionable next steps
- Run post-incident reviews, spot areas for improvement and help put them in place, including updates to guidelines, runbooks and internal processes
- Help shape the team’s internal toolset by suggesting new features and functionality, and by building automation scripts and custom tooling
- Analyse complex attack patterns and threat actors, turn them into technical insights, and recommend ways to strengthen detection and defence capabilities
- Work closely with internal teams such as Threat Intelligence, Vulnerability Management and Business Application teams, as well as external partners, to ensure a joined-up response




- Take part in on-call rotations to support 24/7 coverage and fast response to critical incidents

What you bring

- University degree in Computer Science, Cyber Security or a related field (Master’s preferred)
- Extensive hands-on Incident Response experience in complex environments; background in IT Forensics, Malware Analysis or Vulnerability Management is a plus
- Broad technical knowledge of system architecture and core security technologies: Linux and Windows, Active Directory / Entra ID, web technologies, email, networking, cryptography and common DevOps tools
- Software engineering and scripting skills: Python, Golang, Shell, PowerShell, CI/CD and database management
- Solid understanding of the technical and organisational sides of information security, gained through defensive or offensive work
- In-depth knowledge of attack concepts, terminology, tools and TTPs
- Strong analytical and problem-solving skills, with the ability to structure, analyse and communicate large amounts of information accurately
- Excellent communication skills and fluent English (written and spoken, including security terminology)
- Willingness to join on-call shifts
- Certifications such as SANS/GIAC (GCIH, GNFA, GCFA, GREM, GCFE, GIME), CompTIA Security+, CISSP, CISA or CISM are a plus, not a must

What’s on offer

- Hybrid working that balances time in the office with remote work, plus the option to work from abroad for part of the year
- Performance-based rewards, including a company bonus, pension, employee share programme and a range of employee discounts (varies by location)
- Career development, digital learning and international mobility opportunities in a culture that encourages innovation and ownership
- Versátil working, health and wellbeing benefits (including healthcare and parental leave), and support for people returning from career breaks

📌 Senior Security Incident Responder (Barcelona)
🏢 Montash
📍 Barcelona