Defensive Security Engineer

SQUAD - Cabinet de conseils et d’expertises; Barcelona; Presencial; EUR 65.000 - 95.000; Jornada completa

Descripción de la vacante

SQUAD Group in Barcelona is seeking a Defensive Security Engineer to join the Incident Response team. You will strengthen the defensive posture, drive containment, eradication, and recovery efforts, and collaborate across security functions to protect critical assets.

The role requires hands-on incident response experience, knowledge of EDR/SIEM/NIDS, and strong AWS Cloud security skills, with a hacker mindset and fluency in English. Spanish is a plus for the team in Barcelona.

Formación

• Experience as a security analyst resolving incidents in large-scale enterprises.
• Proficient with security tools such as EDR, SIEM, and NIDS.
• Strong AWS Cloud security knowledge (SCPs, Security Groups, IAM).
• Familiar with MITRE ATT&CK, ENISA, or NIST frameworks.
• Solid knowledge of security for networks, protocols, and applications.
• Understanding of SDLC and automation with Kubernetes, GitHub Actions and IaC.
• Analytical, autonomous, proactive with a hacker mindset.
• Fluent in English; Spanish language skills are a plus.

Responsabilidades

• Actively participate in the entire incident response lifecycle, from preparation to recovery.
• Develop and refine incident response policies, playbooks, escalation procedures.
• Collaborate on management and optimization of defensive security technologies (EDR, SIEM, NIDS).
• Gather and analyze threat intelligence to enhance detection and prevention.
• Work closely with the SOC team and other security departments for alignment and operational efficiency.
• Prepare regular reports on incidents and alerts, sharing insights to drive improvements.

Conocimientos

Security analyst

Fluent English

Herramientas

Kubernetes

GitHub Actions

Infrastructure as Code

Descripción del empleo

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services.

Our mission: Securing Together!

We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure.

As part of our growing team, we're seeking a Defensive Security Engineer. Based in Barcelona, this role will put you at the core of a top-tier Incident Response team, defending the digital assets of a company that connects hundreds of millions of people every month.

Your Responsibilities

As a member of the Incident Response team, your mission will be to strengthen the defensive posture and ensure an effective response to any potential threat.

• Actively participate in the entire incident response lifecycle, from preparation and detection to containment, eradication, and recovery.
• Contribute to the development and refinement of incident response policies, playbooks, and escalation procedures.
• Collaborate on the management and optimization of defensive security technologies, including EDR, SIEM, DLP, and NIDS.
• Gather and analyze threat intelligence to enhance detection and prevention efforts.
• Work closely with the SOC team and other security departments to ensure alignment and operational efficiency.
• Prepare regular reports on incidents and alerts, sharing valuable insights to drive improvements in security controls.

Who We're Looking For

• You have experience as a security analyst with a proven track record of resolving incidents in large-scale enterprise environments.
• You're proficient with security tools like EDR, SIEM, and NIDS.
• You have a strong understanding of AWS Cloud security technologies and controls (SCPs, Security Groups, IAM, etc.).
• You are familiar with security frameworks and methodologies such as MITRE ATT&CK, ENISA, or NIST.
• You have solid knowledge of security for networks, protocols, and applications.
• You understand the software development lifecycle (SDLC) and automation with modern tools like Kubernetes, GitHub Actions, and Infrastructure as Code.
• You are an analytical, autonomous, and proactive individual with a hacker mindset.
• You are fluent in English (both written and spoken).
• Spanish language skills are considered a plus.

Why Join Squad?

• Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience.
• Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.
• Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog.
• Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.