> Markdown version of [/jobs/ext/4576013-cyber-experienced-analyst-incident-response](https://www.wearedevelopers.com/jobs/ext/4576013-cyber-experienced-analyst-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber - Experienced Analyst Incident Response

- **Company:** Deloitte
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Command-Line Interface, Cloud Computing Security, Cyber Security, Digital Forensics, Network Forensics, Packet Analyzer, Scripting, Google Cloud, Cloud Platform System, Malware, Kubernetes, Cybercrime, Docker
- **Published:** November 5, 2026
- **Apply:** https://empleo.es.deloitte.com/talentcommunity/apply/1454196633/?locale=es_ES

## About the Role

We are looking for someone with:

 * 3+ years of experience in Security Operations, Cyber Incident Response, CIRT, CSIRT or similar environments.
 * Hands-on experience in incident investigation, including containment, eradication and remediation activities.
 * Knowledge of digital forensics, evidence preservation and incident response processes and procedures.
 * Experience assessing incident scope and severity and documenting investigations throughout the incident lifecycle.
 * Knowledge of cloud environments and cloud security, ideally across platforms such as Microsoft Azure, Amazon Web Services or Google Cloud Platform.
 * Fluent English, as you will work daily with colleagues across different countries and regions.
 * A degree in Technology, Cybersecurity or a related field, or equivalent professional experience.

Nice to have

We would especially value experience or knowledge in:

 * Cloud security technologies such as CASB, CWPP or CSPM.
 * Containers and orchestration technologies such as Docker and Kubernetes.
 * Windows internals and host and network forensic analysis.
 * Cyber threats, malware analysis and the use of Indicators of Compromise (IOC) and Indicators of Attack (IOA).
 * Packet capture analysis, malware sandboxing and penetration testing tools.
 * Command-line or scripting languages.
 * Working within large, complex and international technology environments.

## Description

As part of the Incident Response team, you will:

 * Investigate cybersecurity incidents and assess their scope, impact and severity.
 * Support incident response activities throughout the lifecycle, including containment, eradication and recovery.
 * Perform digital forensic investigations, including disk and memory analysis, while ensuring appropriate evidence preservation and traceability.
 * Investigate incidents affecting cloud and enterprise environments, working with relevant security technologies and teams.
 * Analyse host, network and other forensic artifacts to identify potential indicators of compromise.
 * Work closely with Incident Response specialists and other technical teams across different countries and time zones.
 * Provide clear status updates and escalate relevant information during global cybersecurity incidents.
 * Recommend remediation actions to resolve incidents, reduce their impact and help prevent similar events in the future.