Cyber Defence

Hace 1 semana

Barcelona, Cataluña, España Glovo Jornada completa
Overview

As a CSIRT Engineer at Glovo, you will defend and shape our security posture by proactively hunting threats and building automated response capabilities. You will join a Cyber Defense team to improve detection, incident response, and readiness through playbooks and tooling. This role emphasizes automation, high-fidelity alerts, and cross-functional collaboration to protect Glovo’s ecosystem at scale. You’ll operate at the intersection of DFIR, threat hunting, and cloud security to drive a proactive security culture.

Compensaciones / Beneficios
  • Top-notch private health insurance
  • Monthly Glovo credit
  • Discounts on transportation and food
  • Discounted gym memberships
  • Flexible work options (work from home 2 days/week, up to 3 weeks abroad)
  • Enhanced parental leave and nursery
Responsabilidades
  • Serve as the first responder for security incidents and conduct DFIR investigations
  • Design and maintain incident response playbooks and methodologies
  • Develop and tune high-fidelity, low-noise alerts from raw logs
  • Build tooling and automation to support incident response (SOCless ambitions)
  • Proactively hunt threats across the infrastructure and research emerging threats
  • Manage security log ingestion tools and SIEM for full visibility
Requisitos principales
  • Experience in Incident Response and Digital Forensics (plus)
  • Operational experience with AWS (desirable)
  • Proficiency in Python or Golang for automation
  • Strong detection engineering and alert tuning skills
  • Curiosity and knowledge of Threat Hunting and MITRE ATT&CK framework
  • Good written and verbal communication skills
  • Proactivity
  • Curiosity
  • Strong communication
  • AWS
  • Python or Golang
  • Threat monitoring and alert tuning