Defensive Security Engineer (IR)

Adevinta; España; Híbrido; EUR 70.000 - 90.000; Jornada completa

Descripción de la vacante

A global digital marketplace leader is seeking a Defensive Security Engineer to join their Incident Response team in Spain. The role involves enhancing security strategies and managing responses to security incidents in a collaborative environment. Ideal candidates will have strong analytical skills and experience with defensive cybersecurity technologies. Attractive benefits include a competitive salary, remote work options, and an emphasis on professional growth.

Servicios

Competitive Base Salary

Annual Bonus

Work From Anywhere

24/7 Employee Assistance Program

Collaborative Environment for Growth

Formación

• Experience with security frameworks and methodologies such as MITRE ATT&CK, ENISA, or NIST.
• Fluency in English, both spoken and written.
• One year of experience in resolving security incidents in large enterprise environments.

Responsabilidades

• Participate in incident response lifecycle processes.
• Support development of incident response policies and procedures.
• Monitor security operations with the SOC team.

Conocimientos

Incident Response

Defensive Cybersecurity

Threat Intelligence

Analytical Skills

Communication Skills

AWS Cloud Technologies

Agile Methodology

Herramientas

EDR

SIEM

DLP

NIDS

Descripción del empleo

We're Adevinta, a global leader in digital marketplaces. Our household name brands, including Marktplaats in the Netherlands, mobile.de in Germany and leboncoin in France, reach hundreds of millions of people every month.

We're all about matchmaking, and our sites help people find whatever they're looking for in their local communities - whether it's a car, an apartment, a sofa or a new job. Every connection made or item found makes a difference by creating a world where people share more and waste less.

Our brands are supported by global Tech Hubs in Barcelona, Amsterdam, Paris and Berlin. Their goal is to develop common global products and innovation platforms which all of our brands can use. This means using cutting edge technology to create highly scalable, customisable and secure products and components that free up development time and leverage our access to global data.

What you'll do & Who you are

As the Defensive Security Engineer, you will be part of the company's Incident Response (IR) team and collaborate with our Security Operations Centre (SOC) provider. This role is crucial in defending our digital assets, ensuring an effective response to security incidents, and proactively enhancing our defensive posture. This position requires autonomy and pro‑activeness skills, and a deep understanding of defensive cybersecurity technologies.

You will be instrumental in ensuring that Adevinta's security strategy covers industry-relevant security standards. The Incident Response team is part of the Information Security department where your team will collaborate with other services such as Vulnerability Management, Bug Bounty programs, and SPLC Security among others.

What you will do:

Contribute to the Incident Response (IR) team's efforts by fostering a culture of proactive defence and continuous improvement through active participation in response processes and initiatives.

Actively participate in the incident response lifecycle, including preparation, detection, analysis, containment, eradication, recovery and learning, ensuring timely and effective responses to potential threats.

Support the development and refinement of incident response policies, playbooks, escalation procedures, and tabletop exercises. Additionally, you will contribute to post‑mortem analyses to improve incident detection and response capabilities continuously.

Work closely with other relevant teams and roles, such as the DPO, Privacy, Global Incident Teams, the rest of the InfoSec teams, and E&C, ensuring effective communication and alignment during incident response efforts.

Assist in managing the external MSSP by ensuring alignment with organisational policies, standards, and expectations regarding service quality. You will collaborate with the SOC team to monitor and assess the performance of security monitoring, triage, and alerting processes, contributing to optimising SOC operations and improving efficiency.

Participate in the operations and enhance the control of defensive security technologies, including EDR, SIEM, DLP, NIDS, and threat intelligence solutions.

Gather, analyse, and operationalise threat intelligence information to enhance detection, response, and prevention efforts, ensuring timely identification and mitigation of potential threats.

Collaborate to prepare periodic reports and collaborate with cross‑functional teams to share valuable insights gained from alerts and incidents. This collaboration will help drive enhancements to security controls and inform product decisions to reduce the frequency and impact of future incidents.

You will report to the Incident Response Manager.

You may be required to travel occasionally, mainly to the EU.

You will have the possibility of being on‑call.

Who you are:

• An experienced security analyst with the mentioned solutions and resolving security incidents in large enterprise environments.
• You are familiar with Incident Management At Google (IMAG).
• Structured, analytical, autonomous and proactive persona.
• Familiar with the Agile methodology.
• 1 year‑experience with security frameworks and methodologies such as MITRE ATT&CK, ENISA or NIST.
• You have a hacker and an open mindset.
• You have software development skills.
• You have a good understanding of AWS Cloud technologies, services, security capabilities, and controls such as SCPs, Security Groups, IAM, etc.
• You understand SDLC (coding and development) with modern tooling and ecosystems such as Kubernetes, Github, Github Actions, infrastructure as code, etc.
• You have excellent knowledge of security for networks, protocols, systems and applications.
• You have strong analytical and problem‑solving skills, with the ability to synthesise complex data into actionable insights.
• You are fluent in English (spoken and written).
• You have excellent communication and interpersonal skills, with the ability to build relationships and influence others.
• You have demonstrated an ability to work in a multicultural environment.

Nice to have:

• Public or private presentations.
• Open source contributor.
• Participated in conferences and training.
• Certifications.
• Member of bug bounty programs, CTF player or member of ethical hacking communities, recognised in the Hall of Fame, CVE mentions or vulnerability reporter.

Benefits

Life at Adevinta comes with its perks! Our Adevintans enjoy the following benefits:

• An attractive Base Salary 💸
• Participation in our Short Term Incentive plan (annual bonus) 🏆
• Work From Anywhere: Enjoy up to 20 days a year of working from anywhere! Maybe not from the moon🌛well why not! just make sure you have internet connection! 🌍
• A 24/7 Employee Assistance Program for you and your family, because we care
• Win together, lose together is one of our key behaviours. At Adevinta you will find a collaborative environment with an opportunity to explore your potential and grow 🌱

On top of these, we also provide a range of locally relevant benefits. Wanna know more? Apply and ask our recruiters!

Adevinta is an equal opportunity employer and we value diversity. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status.

If you feel like you don't meet all of the requirements for this role but are interested, please consider applying anyway. Research suggests that women and individuals from underrepresented groups may self‑select out of opportunities if they don't meet 100% of the job requirements. We strongly encourage people from historically excluded groups to apply and look forward to speaking with you.