OverviewAs a CSIRT Engineer at Glovo, you will defend and shape our security posture by proactively hunting threats and building automated response capabilities.

You will join a Cyber Defense team to improve detection, incident response, and readiness through playbooks and tooling.

This role emphasizes automation, high-fidelity alerts, and cross-functional collaboration to protect Glovo's ecosystem at scale.

You'll operate at the intersection of DFIR, threat hunting, and cloud security to drive a proactive security culture.

Compensaciones / BeneficiosTop-notch private health insurance

Monthly Glovo credit

Discounts on transportation and food

Discounted gym memberships

Versátil work options (work from home 2 days/week, up to 3 weeks abroad)

Enhanced parental leave and nursery

ResponsabilidadesServe as the first responder for security incidents and conduct DFIR investigations

Design and maintain incident response playbooks and methodologies





Develop and tune high-fidelity, low-noise alerts from raw logs

Build tooling and automation to support incident response (SOCless ambitions)

Proactively hunt threats across the infrastructure and research emerging threats

Manage security log ingestion tools and SIEM for full visibility

Requisitos principalesExperience in Incident Response and Digital Forensics (plus)

Operational experience with AWS (desirable)

Proficiency in Python or Golang for automation

Strong detection engineering and alert tuning skills

Curiosity and knowledge of Threat Hunting and MITRE ATT&CK; framework

Good written and verbal communication skills

Proactivity

Curiosity

Strong communication

AWS

Python or Golang

Threat monitoring and alert tuning

📌 Cyber Defence & Incident Response Engineer (They/She/He) (Barcelona)
🏢 Glovo
📍 Barcelona