Cyber Defense & Incident Response Engineer

Responsibilities

• ▹Support Digital Forensics and Incident Response (DFIR) investigations into security breaches and anomalies
• ▹Design and maintain incident response playbooks and investigation methodologies
• ▹Create, validate, and fine-tune high-fidelity, low-noise alerts
• ▹Build tooling and automation to reduce manual incident response toil
• ▹Proactively hunt emerging threats across the infrastructure
• ▹Support management of security log ingestion tools and SIEM

Requirements

• ▹Coding skills in Python (or Golang) to automate responses and build security tooling
• ▹Curiosity about threat hunting with understanding of the MITRE ATT&CK framework
• ▹Good written and verbal communication for post-mortems and incident documentation

Nice to have

• ▹Experience in Incident Response and Digital Forensics
• ▹Operational experience with AWS
• ▹Relevant certifications (GCIH, GCFA, GNFA, or AWS Certified Security - Specialty)
• ▹Experience with SOAR platforms
• ▹Knowledge of data privacy regulations related to data breaches

Soft skills

What we offer

• ▹Top-notch private health insurance
• ▹Monthly Glovo credit
• ▹Discounts on transportation, food, and childcare
• ▹Discounted gym memberships
• ▹Extra time off, 2 days/week home office, and up to 3 weeks/year working from anywhere
• ▹Enhanced parental leave and office-based nursery

About the company

Glovo, part of the Delivery Hero Group, is a leading local delivery platform operating in around 65 countries, headquartered in Berlin and listed on the Frankfurt Stock Exchange (MDAX).