Experteer Overview
As a CSIRT Engineer within Glovo's Cyber Defense team, you will defend and enhance our security ecosystem with proactive threat hunting, incident response, and automation. You’ll shape readiness through playbooks, refine detection to reduce noise, and drive SOCless automation across the security stack. Your work supports rapid, secure growth and resilience for a fast-scaling, mission-driven delivery platform. This role offers hands-on impact in a globally distributed operation with strong emphasis on collaboration and continuous improvement.
Compensaciones / Incentivos
• Be the first responder in incident response and DFIR investigations following the Cyber Incident Response Cycle
• Architect and maintain incident response playbooks and investigation methodologies
• Create, validate, and tune high-fidelity security alerts to convert logs into actionable intelligence
• Build tooling and automation to support incident response and reduce manual toil
• Proactively threat hunt and research emerging threats across the infrastructure
• Coordinate with security log ingestion tools and SIEM to ensure full visibility across Glovo
Responsabilidades
• Experience in Incident Response and Digital Forensics (preferred)
• Operational experience with AWS (desirable)
• Proficient in Python (or Golang) for automation and tooling
• Strong detection engineering skills to tune alerts and reduce noise
• Curiosity for Threat Hunting and knowledge of MITRE ATTu0026CK framework
• Good written and verbal communication for post-mortems and incident docs
Requisitos principales
• private health insurance
• monthly Glovo credit
• discounts on transportation, food, and kindergarten
• discounted gym memberships
• extra time off and remote work options
• enhanced parental leave