Cyber - Experienced Analyst Incident Response

As part of the Incident Response team, you will:

• Investigate cybersecurity incidents and assess their scope, impact and severity.
• Support incident response activities throughout the lifecycle, including containment, eradication and recovery.
• Perform digital forensic investigations, including disk and memory analysis, while ensuring appropriate evidence preservation and traceability.
• Investigate incidents affecting cloud and enterprise environments, working with relevant security technologies and teams.
• Analyse host, network and other forensic artifacts to identify potential indicators of compromise.
• Work closely with Incident Response specialists and other technical teams across different countries and time zones.
• Provide clear status updates and escalate relevant information during global cybersecurity incidents.
• Recommend remediation actions to resolve incidents, reduce their impact and help prevent similar events in the future.

We are looking for someone with:

• 3+ years of experience in Security Operations, Cyber Incident Response, CIRT, CSIRT or similar environments.
• Hands-on experience in incident investigation, including containment, eradication and remediation activities.
• Knowledge of digital forensics, evidence preservation and incident response processes and procedures.
• Experience assessing incident scope and severity and documenting investigations throughout the incident lifecycle.
• Knowledge of cloud environments and cloud security, ideally across platforms such as Microsoft Azure, Amazon Web Services or Google Cloud Platform.
• Fluent English, as you will work daily with colleagues across different countries and regions.
• A degree in Technology, Cybersecurity or a related field, or equivalent professional experience.

Nice to have

We would especially value experience or knowledge in:

• Cloud security technologies such as CASB, CWPP or CSPM.
• Containers and orchestration technologies such as Docker and Kubernetes.
• Windows internals and host and network forensic analysis.
• Cyber threats, malware analysis and the use of Indicators of Compromise (IOC) and Indicators of Attack (IOA).
• Packet capture analysis, malware sandboxing and penetration testing tools.
• Command-line or scripting languages.
• Working within large, complex and international technology environments.

️ Hybrid and flexible working model, with flexible hours and a healthy balance between remote work and collaboration in our offices or at client sites.

A positive and collaborative work environment, with team-building activities, cultural and sports events throughout the year.

️ Holistic wellbeing, supported by our physical, mental, and financial health programs, including on-site medical services.

Social impact, with access to a wide range of national and international volunteering initiatives and pro bono projects where you can contribute your time and talent.

️ A strong feedback culture and continuous learning, within an inclusive environment that promotes equal opportunities and personalized development plans. You may even see yourself at Deloitte University in Paris.

Exclusive benefits, including a comprehensive benefits portfolio and a flexible compensation plan.

Next steps:

If what you have read resonates with you, here is what comes next:

• Apply to the position by clicking “Apply now” and completing your profile.
• If your experience matches the role, our Talent team will contact you to get to know you better.

Start your journey with Deloitte. We will guide you through each stage of the process until your onboarding.

Deloitte es una Firma de servicios profesionales firmemente comprometida con la igualdad de oportunidades. En este sentido, la Firma aceptará y tramitará solicitudes de todos los sectores de la sociedad, no discriminando por motivos de sexo, expresión de género, raza, religión o creencias, origen étnico o nacional, discapacidad, enfermedad o condición de salud, predisposición genética a sufrir patologías, edad, ciudadanía, estado civil, orientación o identidad sexual, situación socioeconómica o cualquier otra condición o circunstancia personal o social.

Can you imagine taking part in the transformation of leading national and international organizations?

At Deloitte, we are committed to making an impact on society, our clients, and our people.

Join Deloitte’s Global Cyber Incident Response team and help protect our organisation from complex cyber threats.

Based in Madrid, you will be part of an international team operating across Spain, India and the US, supporting the investigation and response to cybersecurity incidents across Deloitte’s global environment.

This is a hands-on technical role where you will combine incident response, digital forensics and cloud security, working closely with specialists across different countries and teams to assess incidents, minimise their impact and support effective recovery.