Defensive Security Engineer (IR)

Company

Adevinta operates digital marketplaces across Europe and beyond, including hirify.global, with global hubs in Barcelona and Amsterdam.

What you will do

• Lead deep investigations into cloud infrastructure, platform-level, and other incidents escalated to the L3 Cloud Defense function.
• Handle incident response across preparation, detection, analysis, containment, eradication, recovery, and learning.
• Develop and refine cloud-specific playbooks, escalation procedures, and tabletop exercises aligned with the priority framework.
• Participate in the on-call rotation and support response efforts under pressure.
• Operationalise threat intelligence in the SIEM detection pipeline and improve detection and prevention.
• Coordinate with Core Defense and SCASSI to strengthen escalation paths and post-mortem-driven improvements.

Requirements

• 4+ years of experience in security engineering, SOC, or incident response, preferably in large enterprise environments.
• Hands-on experience across the full incident response lifecycle and strong analytical and problem-solving skills.
• Experience with defensive security technologies including EDR, SIEM, DLP, NIDS, and threat intelligence solutions.
• Experience developing and refining incident response policies, playbooks, escalation procedures, tabletop exercises, and post-mortem analyses.
• Fluent English.
• Alignment with a GitOps and defense-as-code approach, including managing detection content, security configurations, playbooks, and operational tooling as versioned code in Git with peer reviews, automated testing, and repeatable deployments.
• Good understanding of AWS technologies, services, security capabilities, and controls, including SCPs, Security Groups, and IAM.
• Familiarity with SDLC, Kubernetes, GitHub, GitHub Actions, CI/CD pipelines, infrastructure as code, MITRE ATT&CK or NIST, Incident Management At Google, and Agile methodology.

Nice to have

• Public or private presentation experience.
• Open-source contributions, security certifications, bug bounty participation, CTF competitions, or involvement in ethical hacking communities.

Culture & Benefits

• Base salary and participation in an annual short-term incentive plan.
• Work from anywhere for up to 20 days per year.
• 24/7 Employee Assistance Program for employees and their families.
• Collaborative environment with opportunities to explore potential and grow.
• Additional locally relevant benefits and an equal opportunity workplace.