> Markdown version of [/jobs/ext/1266820-cyber-defense-incident-response](https://www.wearedevelopers.com/jobs/ext/1266820-cyber-defense-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Defense & Incident Response

- **Company:** Glovo
- **Location:** Barcelona, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing, Cloud Engineering, Digital Forensics, Intrusion Detection and Prevention, Python (Programming Language), Security Log, Security Information and Event Management, Mitre Att&ck, Cyber Threat Analysis, Cybercrime, Software Coding, Cyber Warfare, Security Orchestration, Automation & Response, Golang
- **Published:** July 15, 2026
- **Apply:** https://es.indeed.com/viewjob?jk=77d7f35394de405c

## About the Role

* The Responder's Mindset: Experience in Incident Response and Digital Forensics it's a plus.
 * Cloud Proficiency: Desirable operational experience with AWS; you know how to track an adversary through cloud-native logs.
 * Coding Skills: Experience in Python (or Golang) to automate responses and build custom security tooling.
 * Detection Engineering: A knack for threat monitoring and fine-tuning alerts to find the needle in the haystack.
 * Proactivity: Curiosity to learn about Threat Hunting with understanding of the MITRE ATT&CK framework, among other security topics.
 * Communication: Good written and communication skills to support post-mortem discussions and document complex incidents clearly.

Nice-to-haves

 * Relevant certifications (GCIH, GCFA, GNFA, or AWS Certified Security - Specialty).
 * Experience with SOAR (Security Orchestration, Automation, and Response) platforms.
 * Knowledge of data privacy regulations and security protocols related to data breaches.

## Description

Glovo's success and constant growth introduce complex challenges in defending our ecosystem. We are looking for a CSIRT Engineer to join our Cyber Defense team. Your mission is to be the shield of Glovo, ensuring we are not just ready to respond to threats, but proactive enough to hunt them down before they arrive. You will be a key player in building a "SOCless" future through high-level automation and sophisticated detection engineering., * Be the First Responder: Support Digital Forensics and Incident Response (DFIR) efforts, conducting deep-dive investigations into security breaches and anomalies following the Cyber Incident Response Cycle.

 * Architect Readiness: Design and maintain the playbooks and investigation methodologies that ensure Glovo is prepared for any security incident.
 * Precision Monitoring: Create, validate, and fine-tune alerts to ensure high fidelity and low noise, turning raw logs into actionable intelligence.
 * Automate & Orchestrate: Contribute our "SOCless" ambition by building tooling and automation for incident response, reducing manual toil through smart orchestration.
 * Hunt the Threat: Proactively "play the bad guy" by researching emerging threats and conducting threat-hunting exercises across our infrastructure.
 * Manage the Pipeline: Cooperate with the management of our security log ingestion tools and SIEM to ensure full visibility across Glovo.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall)
- [Building Security Champions](https://www.wearedevelopers.com/videos/193-building-security-champions)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Scoring 2000 Products per Request: Performance Pitfalls in Golang](https://www.wearedevelopers.com/videos/2073-scoring-2000-products-per-request-performance-pitfalls-in-golang)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)