Defensive security engineer in incident response

Adevinta
Barcelona, Spain
23 days ago
Apply on www.jobleads.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience required
4 years minimum
Working hours
Regular working hours
Languages
English

Tech stack

Agile Methodology Automation of Tests Cloud Computing Continuous Integration Github Identity and Access Management Systems Development Life Cycle Security Information and Event Management Mitre Att&ck Git Kubernetes Infrastructure Automation Frameworks
+1 more
Free and Open-Source Software

Job description

Описание

We are Adevinta, a leading online classifieds group and champion for sustainable commerce across Europe and beyond. With digital marketplaces across many countries, our portfolio spans consumer goods, mobility, real estate, holiday rentals and jobs. Together, our marketplaces attract more than 120 million users every month and over a million businesses.

Задачи

leading deep investigations into cloud and platform incidents escalated from Core Defense developing and refining cloud-specific playbooks and escalation procedures aligned with the priority framework participating in the on-call rotation contributing to post-mortem analyses that improve detection and response over time operationalise threat intelligence by feeding it into the SIEM detection pipeline collaborate with Core Defense and SCASSI to ensure escalation paths and coordination channels work effectively across all three tiers

Требования

Must be aligned with a GitOps and defense-as-code approach: managing detection content, security configurations, playbooks and operational tooling as versioned code in Git, with peer reviews, automated testing and repeatable deployments. Good understanding of AWS Cloud technologies, services, security capabilities and controls (SCPs, Security Groups, IAM). Familiar with SDLC and modern tooling and ecosystems such as Kubernetes, GitHub, GitHub Actions, CI/CD pipelines and infrastructure as code. Experience with security frameworks and methodologies such as MITRE ATT&CK or NIST. Familiar with Incident Management At Google (IMAG) and Agile methodology. Strong analytical and problem-solving skills with the ability to synthesise complex data into actionable insights. Fluent in English. 4+ years in a security engineering, SOC or incident response role. Будет плюсом: public or private presentations; open-source contributions; certifications; participation in bug bounty programs, CTF competitions or ethical hacking communities

Условия

  • An attractive Base Salary
  • Participation in our Short-Term Incentive plan (annual bonus)
  • Work From Anywhere: Enjoy up to 20 days a year of working from anywhere! Maybe not from the moonwell why not! just make sure you have internet connection!
  • A 24/7 Employee Assistance Program for you and your family, because we care
  • Win together, lose together is one of our key behaviours.
  • At Adevinta you will find a collaborative environment with an opportunity to explore your potential and grow
  • On top of these, we also provide a range of locally relevant benefits.

Requirements

leading deep investigations into cloud and platform incidents escalated from Core Defense developing and refining cloud-specific playbooks and escalation procedures aligned with the priority framework participating in the on-call rotation contributing to post-mortem analyses that improve detection and response over time operationalise threat intelligence by feeding it into the SIEM detection pipeline collaborate with Core Defense and SCASSI to ensure escalation paths and coordination channels work effectively across all three tiers

Требования

Must be aligned with a GitOps and defense-as-code approach: managing detection content, security configurations, playbooks and operational tooling as versioned code in Git, with peer reviews, automated testing and repeatable deployments. Good understanding of AWS Cloud technologies, services, security capabilities and controls (SCPs, Security Groups, IAM). Familiar with SDLC and modern tooling and ecosystems such as Kubernetes, GitHub, GitHub Actions, CI/CD pipelines and infrastructure as code. Experience with security frameworks and methodologies such as MITRE ATT&CK or NIST. Familiar with Incident Management At Google (IMAG) and Agile methodology. Strong analytical and problem-solving skills with the ability to synthesise complex data into actionable insights. Fluent in English. 4+ years in a security engineering, SOC or incident response role. Будет плюсом: public or private presentations; open-source contributions; certifications; participation in bug bounty programs, CTF competitions or ethical hacking communities

Benefits & conditions

  • An attractive Base Salary
  • Participation in our Short-Term Incentive plan (annual bonus)
  • Work From Anywhere: Enjoy up to 20 days a year of working from anywhere! Maybe not from the moonwell why not! just make sure you have internet connection!
  • A 24/7 Employee Assistance Program for you and your family, because we care
  • Win together, lose together is one of our key behaviours.
  • At Adevinta you will find a collaborative environment with an opportunity to explore your potential and grow
  • On top of these, we also provide a range of locally relevant benefits.

About the company

We are Adevinta, a leading online classifieds group and champion for sustainable commerce across Europe and beyond. With digital marketplaces across many countries, our portfolio spans consumer goods, mobility, real estate, holiday rentals and jobs. Together, our marketplaces attract more than 120 million users every month and over a million businesses.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.jobleads.com
Prepare application

Good distractions

Loading talks and stories from around this role…