Digital Forensic and Cybersecurity Incident Responder

Boehringer Ingelheim; Sant Cugat del Vallès; Presencial; EUR 85.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible working conditions

Life and accident insurance

Health insurance at a competitiveprice

Investment in learning and development

Gym membership discounts

Descripción de la vacante

Boehringer Ingelheim in Spain seeks an experienced security professional to drive incident response and digital forensics. You will lead investigations, analyze multi-source data, and collaborate to improve detection workflows while guiding junior analysts.

Required are 5+ years in incident response, scripting skills, and strong knowledge of SIEM/EDR. AWS and Red Team experience are a plus; certifications are valued.

Formación

• 5+ years hands-on incident response experience.
• Experience in digital forensics including evidence collection and analysis.
• Experience in at least two of: Malware Analysis, Cloud Security, Vulnerability Management or OT.
• Scripting in Python, PowerShell or Bash.
• Strong Linux/Windows knowledge and networking fundamentals.
• Experience with SIEM, EDR, firewalls and IDS/IPS.
• Excellent problem-solving and communication skills.
• Knowledge of AI/LLM in IR is a plus; Red Team and AWS knowledge are advantages.

Responsabilidades

• Monitor and analyze security infrastructure; identify threats and incidents.
• Lead critical security incident investigations.
• Contribute to incident response processes and best practices.
• Analyze logs and data sources to determine root causes.
• Improve incident detection and response workflows.
• Collaborate across teams to implement playbooks and use cases.
• Serve as escalation point for analysts on the team.
• Evaluate and recommend new tools to enhance IR capabilities.
• Provide expertise on Incident Response and Digital Forensics.

Conocimientos

Incident response

Digital forensics

Malware analysis

Cloud security

Vulnerability management

Scripting (Python/PowerShell/Bash)

Linux/Windows

Communication (written and verbal)

Educación

Security certifications (CRTO/OSCP/GCIH/GCFA)

Bachelor's degree in IT or related field

Herramientas

SIEM

EDR

Firewalls/IDS/IPS

Descripción del empleo

Tasks And Responsibilities

• Monitor and analyze the security infrastructure, playing a key role in identifying and addressing threats and incidents to maintain the integrity, confidentiality, and availability of critical data and systems
• Contribute to security incident response processes and best practices
• Be the leader of critical security incident investigations
• Carry out comprehensive security investigations by analyzing logs, network traffic… and other data sources to find root causes
• Continuously improve and monitor our security incident detection and response workflows
• Collaborate with cross-functional teams to implement and improve use cases, runbooks, and procedures to properly handle occurring security incidents
• Act as a point of escalation for analysts on the team
• Leverage your expertise to identify, evaluate, and recommend new tools and technologies that can enhance the incident response capabilities of the team
• Provide expertise on Incident Response Activities and Digital Forensics, including the capture and preservation of system logs, volatile memory captures, image captures…

Requirements

• 5+ years of experience hands‑on incident response
• Hands‑on experience in digital forensics, including the collection, triage, and analysis of evidence from endpoints using artifact extraction tools
• Demonstrable experience in at least two of the following areas: Malware Analysis, Cloud Security, Vulnerability Management or Operational Technology
• Programming experience in scripting languages like (Python, PowerShell or Bash)
• Solid understanding of Linux and Windows architecture, common networking protocols, and packet inspection concepts
• Experience with security technologies such as firewalls, IDS/IPS, anti‑malware, SIEM, and endpoint detection and response (EDR) tools
• Excellent problem‑solving skills and the ability to perform effectively under pressure during high‑severity incidents
• Strong written and verbal communication skills, including the ability to document findings and present recommendations
• Advanced knowledge of common attack techniques (system exploits, network attacks, web protocols, phishing, and malware)
• Knowledge of how to integrate AI/LLM capabilities into Incident Response, such as automated evidence summarization, SOC/IR playbook automation, or detection‑rule generation, is considered a plus
• Hands‑on experience in Red Team is considered a plus
• Knowledge of cloud architecture, particularly AWS, is considered a plus
• Security certifications like CRTO, OSCP, GCIH, GCFA, GEIR… are considered a plus

Please note:

The job title used in this advertisement may differ from the official contractual title.

#IamBoehringerIngelheim because…

We are continuously working to design the best experience for you. Here are some examples of how we will take care of you:

• Flexible working conditions
• Life and accident insurance
• Health insurance at a competitive price
• Investment in your learning and development
• Gym membership discounts

Our Company

Why Boehringer Ingelheim?

With us, you can develop your own path in a company with a culture that knows our differences are our strengths - and break new ground in the drive to make millions of lives better.

Here, your development is our priority. Supporting you to build a career as part of a workplace that is independent, authentic and bold, while tackling challenging work in a respectful and friendly environment where everyone is valued and welcomed.

Alongside, you have access to programs and groups that ensure your health and wellbeing are looked after - as we make major investments to drive global accessibility to healthcare. By being part of a team that is constantly innovating, you'll be helping to transform lives for generations.

Want to learn more? Visit https://www.boehringer-ingelheim.com