Defensive Security Engineer

Defensive Security Engineer (IR) – Join Adevinta , a global leader in digital marketplaces. We’re all about matchmaking and mission to connect people in their local communities while ensuring secure and scalable platforms. What You’ll Do Contribute to the Incident Response (IR) team’s efforts by fostering a culture of proactive defence and continuous improvement. Actively participate in the incident response lifecycle (preparation, detection, analysis, containment, eradication, recovery and learning) ensuring timely and effective responses to potential threats. Support the development and refinement of incident response policies, playbooks, escalation procedures, and tabletop exercises. Contribute to post‑mortem analyses to improve incident detection and response capabilities continuously. Work closely with other relevant teams and roles, such as DPO, Privacy, Global Incident Teams, InfoSec teams and E&C, ensuring effective communication and alignment during incident response efforts. Assist in managing the external MSSP by ensuring alignment with organisational policies, standards and expectations regarding service quality. Collaborate with the SOC team to monitor and assess the performance of security monitoring, triage and alerting processes. Participate in operations and enhance the control of defensive security technologies, including EDR, SIEM, DLP, NIDS, and threat intelligence solutions. Gather, analyse and operationalise threat intelligence information to enhance detection, response and prevention efforts, ensuring timely identification and mitigation of potential threats. Collaborate to prepare periodic reports and share valuable insights gained from alerts and incidents, helping drive enhancements to security controls and inform product decisions to reduce the frequency and impact of future incidents. Report to the Incident Response Manager. May be required to travel occasionally, mainly to the EU. Work in a hybrid remote/on‑site environment, with the team physically spread across different geo‑locations (Adevinta’s hubs – Barcelona & Amsterdam). On‑call may be required. Who You Are An experienced security analyst with the mentioned solutions and resolving security incidents in large enterprise environments.Familiar with Incident Management At Google (IMAG). Structured, analytical, autonomous and proactive persona. Familiar with the Agile methodology. Experience with security frameworks and methodologies such as MITRE ATT&CK, ENISA or NIST. Has a hacker mindset. Has software development skills. Good understanding of AWS Cloud technologies, services, security capabilities and controls such as SCPs, Security Groups, IAM, etc. Understands SDLC (coding and development) with modern tooling and ecosystems such as Kubernetes, GitHub, GitHub Actions, infrastructure‑as‑code, etc. Excellent knowledge of security for networks, protocols, systems and applications. Strong analytical and problem‑solving skills, with the ability to synthesise complex data into actionable insights. Fluency in English (spoken and written). Excellent communication and interpersonal skills, with the ability to build relationships and influence others. Demonstrated ability to work in a multicultural environment. Nice to Have Public or private presentations. Open source contributor. Participation in conferences and trainings.> Certifications. Member of bug bounty programs, CTF player or member of ethical hacking communities, recognised in the Hall of Fame, CVE mentions or vulnerability reporter. Benefits An attractive Base Salary. Participation in a Short Term Incentive plan (annual bonus). Work From Anywhere: up to 20 days a year of working from anywhere, provided you have a reliable internet connection. A 24/7 Employee Assistance Program. Win together, lose together – a collaborative environment that encourages exploration of your potential and growth. A range of locally relevant benefits. Adevinta is an equal opportunity employer and we value diversity. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status. If you feel like you don’t meet all of the requirements for this role but are interested, please consider applying anyway. We strongly encourage people from historically excluded groups to apply and look forward to speaking with you. #J-18808-Ljbffr