About the company
Glovo is part of the Delivery Hero Group, the world's pioneering local delivery platform. We operate in around 65 countries worldwide. Headquartered in Berlin, Germany.
Responsibilities
- Be the First Responder: Support Digital Forensics and Incident Response (DFIR) efforts, conducting deep-dive investigations into security breaches and anomalies following the Cyber Incident Response Cycle
- Architect Readiness: Design and maintain the playbooks and investigation methodologies
- Precision Monitoring: Create, validate, and fine-tune alerts to ensure high fidelity and low noise
- Automate & Orchestrate: Contribute to the "SOCless" ambition by building tooling and automation for incident response
- Hunt the Threat: Proactively research emerging threats and conduct threat-hunting exercises across infrastructure
- Manage the Pipeline: Cooperate with the management of security log ingestion tools and SIEM
Requirements
- Experience in Incident Response and Digital Forensics is a plus
- Desirable operational experience with AWS
- Experience in Python (or Golang) to automate responses and build custom security tooling
- Detection Engineering: A knack for threat monitoring and fine-tuning alerts
- Curiosity to learn about Threat Hunting with understanding of the MITRE ATT&CK framework
- Good written and communication skills
Nice-to-haves
- Relevant certifications (GCIH, GCFA, GNFA, or AWS Certified Security - Specialty)
- Experience with SOAR platforms
- Knowledge of data privacy regulations and security protocols related to data breaches
Conditions
- Top-notch private health insurance
- Monthly Glovo credit
- Discounts on transportation, food, and kindergarten expenses
- Discounted gym memberships
- Extra time off, freedom to work from home two days a week, and opportunity to work from anywhere for up to three weeks a year
- Enhanced parental leave, and office-based nursery
- Online therapy and wellbeing benefits