Cyber Defence & Incident Response Engineer (They/She/He)Delivery Hero · Barcelona, Catalonia, Spain

Cyber Defence & Incident Response Engineer (They/She/He)

🗓️ Posted 2026-10-06 Barcelona, Catalonia, Spain Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 3,200 EUR–4,800 EUR/mo

About the Company

This is how we deliver. As the world's pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide, powered by tech, designed by people. As one of Europe's largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We push hard, learn quickly, and stay human along the way. It's this wonderful mix of high performance and real community that makes Delivery Hero a place where ambition and belonging grow side by side. If you're curious, collaborative, and ready to dive deep into meaningful work, you'll fit right in. Technology, Information and Internet Specialties: Online food ordering, eCommerce, Technology, Online food delivery, Marketing, Apps, Food tech, Machine Learning, delivery, logistics

Responsibilities

  • ● Company Description
  • ● Glovo is part of the Delivery Hero Group, the world's pioneering local delivery platform, our mission is to deliver an amazing experience-fast, easy, and to your door. We operate in around 65 countries worldwide. Headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index.
  • ● Job Description
  • ● Job Ref ID: JR0074961
  • ● If you're here, it's because you're looking for an exciting ride.
  • ● A ride that will fuel up your ambitions to take on a new challenge and stretch yourself beyond your comfort zone. We'll deliver a non-vanilla culture built on talent, where we work to amplify the impact on millions of people, paving the way forward together.
  • ● YOUR MISSION
  • ● Glovo's success and constant growth introduce complex challenges in defending our ecosystem. We are looking for a CSIRT Engineer to join our Cyber Defense team. Your mission is to be the shield of Glovo, ensuring we are not just ready to respond to threats, but proactive enough to hunt them down before they arrive. You will be a key player in building a "SOCless" future through high-level automation and sophisticated detection engineering.
  • ● THE JOURNEY
  • ● Be the First Responder: Support Digital Forensics and Incident Response (DFIR) efforts, conducting deep-dive investigations into security breaches and anomalies following the Cyber Incident Response Cycle.
  • ● Architect Readiness: Design and maintain the playbooks and investigation methodologies that ensure Glovo is prepared for any security incident.
  • ● Precision Monitoring: Create, validate, and fine-tune alerts to ensure high fidelity and low noise, turning raw logs into actionable intelligence.
  • ● Automate & Orchestrate: Contribute our "SOCless" ambition by building tooling and automation for incident response, reducing manual toil through smart orchestration.
  • ● Hunt the Threat: Proactively "play the bad guy" by researching emerging threats and conducting threat-hunting exercises across our infrastructure.
  • ● Manage the Pipeline: Cooperate with the management of our security log ingestion tools and SIEM to ensure full visibility across Glovo.
  • ● Qualifications
  • ● What You Will Bring To The Ride
  • ● The Responder's Mindset: Experience in Incident Response and Digital Forensics it's a plus.
  • ● Cloud Proficiency: Desirable operational experience with AWS; you know how to track an adversary through cloud-native logs.
  • ● Coding Skills: Experience in Python (or Golang) to automate responses and build custom security tooling.