Cyber Defence & Incident Response Engineer (Cybersecurity)

Location: Barcelona, Spain; on-site role with the option to work from home two days per week.

Company

hirify.global is a local delivery platform operating as part of the Delivery Hero Group across around 65 countries.

What you will do

• Support digital forensics and incident response investigations into security breaches and anomalies.
• Design and maintain incident-response playbooks and investigation methodologies.
• Create, validate, and fine-tune security alerts to improve fidelity and reduce noise.
• Build automation and orchestration tooling to support hirify.global’s SOCless cyber-defence model.
• Research emerging threats and conduct threat-hunting exercises across the infrastructure.
• Help manage security log-ingestion tools and the SIEM to maintain broad visibility.

Requirements

• Experience with incident response and digital forensics.
• Operational experience with AWS and cloud-native security logs.
• Python or Golang experience for automating responses and building security tooling.
• Knowledge of threat monitoring, detection engineering, and alert tuning.
• Understanding of threat hunting and the MITRE ATT&CK framework.
• Strong written and verbal communication skills for documenting incidents and supporting post-mortems.

Nice to have

• GCIH, GCFA, GNFA, or AWS Certified Security – Specialty certification.
• Experience with SOAR platforms.
• Knowledge of data privacy regulations and security protocols for data breaches.

Culture & Benefits

• Private health insurance and enhanced parental leave.
• Monthly hirify.global credit and discounts on transportation, food, kindergarten expenses, and gym memberships.
• Extra time off and flexible home-working options.
• Opportunity to work from anywhere for up to three weeks per year.
• Online therapy, wellbeing benefits, and an office-based nursery.
• Inclusive workplace focused on diversity and equal opportunity.