Senior Incident Response & Digital Forensic

Q-Tech; Bellprat; Presencial; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Meal vouchers

Health insurance

Remote work allowance

Wellbeing reimbursement

Fixed shifts

Descripción de la vacante

Q-Tech, based in Barcelona, is seeking a Senior Incident Response & Digital Forensics specialist to join the Technology Hub of a key retail client. This hands-on role emphasizes real investigations, end-to-end incident management, and continuous improvement within a mature SOC.

You will lead investigations, coordinate across teams and countries, and develop detection capabilities while advising on security matters.

Formación

• 5+ years of Incident Response handling medium to critical incidents.
• Hands-on triage, containment, and end-to-end remediation.
• Experience collaborating with IT, Engineering, Legal, Cloud Operations, and Escalation Management teams.
• Degree in IT or equivalent education.
• High level of English (minimum B2).
• Advanced experience with SIEM (preferably Splunk), SOAR platforms, and EDR solutions.

Responsabilidades

• Coordinate and communicate security incidents across teams and countries.
• Manage the full Incident Response lifecycle (detection, analysis, containment, and remediation).
• Reconstruct cyberattacks and perform malware analysis.
• Develop and enhance detection mechanisms.
• Conduct IT forensic investigations (timeline reconstruction and artifact analysis).
• Prepare technical and executive-level incident reports.
• Advise internal projects on security-related matters.
• Monitor the global threat landscape and provide actionable recommendations.

Conocimientos

Incident Response

Triage & Remediation

Cross-functional Collaboration

Degree in IT

English Proficiency (B2+)

SIEM/SOAR/EDR

Offensive & Defensive Security

Educación

Degree in IT or equivalent

Herramientas

Splunk

Fortinet FortiSOAR

VMRay Sandbox

Any.Run

VirusTotal

Microsoft Defender for Endpoint

MISP

Recorded Future

DFIR Report

Timesketch

Magnet AXIOM

Descripción del empleo

At Q-Tech, we are currently looking for aSenior Incident Response & Digital Forensicsspecialist to join the Technology Hub of one of our key retail clients, with offices located in Barcelona.

This is an opportunity to join an international, highly technical environment with global impact.

MISSION

Lead advanced incident response activities within a mature SOC. This is a hands‑on technical role focused on real investigations, continuous improvement, and end‑to‑end incident management.

RESPONSIBILITIES

• Coordinate and communicate security incidents across teams and countries.
• Manage the full Incident Response lifecycle (detection, analysis, containment, and remediation).
• Reconstruct cyberattacks and perform malware analysis.
• Develop and enhance detection mechanisms.
• Conduct IT forensic investigations (timeline reconstruction and artifact analysis).
• Prepare technical and executive‑level incident reports.
• Advise internal projects on security‑related matters.
• Monitor the global threat landscape and provide actionable recommendations.

REQUIREMENTS

• 5+ years of experience in Incident Response handling medium to critical incidents.
• Hands‑on experience in triage, containment, and end‑to‑end remediation.
• Experience collaborating with IT, Engineering, Legal, Cloud Operations, and Escalation Management teams.
• Degree in IT or equivalent education.
• High level of English (minimum B2).
• Advanced experience with SIEM (preferably Splunk), SOAR platforms, and EDR solutions.
• Strong understanding of offensive techniques and defensive technologies.

FRAMEWORKS & STANDARDS

TECHNOLOGY STACK

• SOAR / Ticketing:Fortinet FortiSOAR
• Malware Sandbox:VMRay Sandbox, Any.Run, VirusTotal
• M365 Security:Microsoft Defender (Endpoint, Identity, Cloud Apps, Office)
• Threat Intelligence:MISP, Recorded Future, DFIR Report
• Digital Forensics:Timesketch, Magnet AXIOM
• SIEM:Splunk (preferred) + enterprise EDR

NICE TO HAVE

• Advanced digital forensics (Windows, macOS, Linux, cloud).
• Incident Response experience in cloud environments (native logging, identity investigations).
• Application security and SaaS threat knowledge.

WHAT THEY OFFER

If you are looking for an international, technical environment with real impact in defending a global organization, this role is for you.

• Flexible compensation:€2,700 annually to allocate between meal vouchers (up to €200/month) and transport (€25/month).
• Health insurance valued at €546.96 annually (€45.58/month).
• Remote work allowance:€268.92 annually (approx. €22.41/month), added to payroll.
• Wellbeing:reimbursement for sports activities (gym, swimming pool, etc.) up to €300 annually, added to payroll upon invoice submission.
• Working Hours: Morning shift, Monday to Friday, 5:45 AM to 2:00 PM, or afternoon shift, Monday to Friday, 1:45 PM to 10:00 PM (fixed shift, no rotation)

Barcelona