Defensive Security Engineer - Incident Response Pro

SQUAD - Cabinet de conseils et d’expertises; Barcelona; Presencial; EUR 65.000 - 95.000; Jornada completa

Descripción de la vacante

SQUAD Group in Barcelona is seeking a Defensive Security Engineer to join the Incident Response team. You will strengthen the defensive posture, drive containment, eradication, and recovery efforts, and collaborate across security functions to protect critical assets.

The role requires hands-on incident response experience, knowledge of EDR/SIEM/NIDS, and strong AWS Cloud security skills, with a hacker mindset and fluency in English. Spanish is a plus for the team in Barcelona.

Formación

• Experience as a security analyst resolving incidents in large-scale enterprises.
• Proficient with security tools such as EDR, SIEM, and NIDS.
• Strong AWS Cloud security knowledge (SCPs, Security Groups, IAM).
• Familiar with MITRE ATT&CK, ENISA, or NIST frameworks.
• Solid knowledge of security for networks, protocols, and applications.
• Understanding of SDLC and automation with Kubernetes, GitHub Actions and IaC.
• Analytical, autonomous, proactive with a hacker mindset.
• Fluent in English; Spanish language skills are a plus.

Responsabilidades

• Actively participate in the entire incident response lifecycle, from preparation to recovery.
• Develop and refine incident response policies, playbooks, escalation procedures.
• Collaborate on management and optimization of defensive security technologies (EDR, SIEM, NIDS).
• Gather and analyze threat intelligence to enhance detection and prevention.
• Work closely with the SOC team and other security departments for alignment and operational efficiency.
• Prepare regular reports on incidents and alerts, sharing insights to drive improvements.

Conocimientos

Security analyst

Fluent English

Herramientas

Kubernetes

GitHub Actions

Infrastructure as Code

Descripción del empleo

SQUAD Group in Barcelona is seeking a Defensive Security Engineer to join the Incident Response team. You will strengthen the defensive posture, drive containment, eradication, and recovery efforts, and collaborate across security functions to protect critical assets.

The role requires hands-on incident response experience, knowledge of EDR/SIEM/NIDS, and strong AWS Cloud security skills, with a hacker mindset and fluency in English. Spanish is a plus for the team in Barcelona.