Senior Security Engineer

Farfetch; Bordeaux; Sur place; EUR 75 000 - 120 000; Plein temps

Avantages offerts par ce poste

Health insurance

Flexible benefits program

Training opportunities

Sabbatical program

Well-being support and tools

Résumé du poste

Farfetch is seeking a seasoned CSIRT/Digital Forensics expert to join the DART team in Porto. You will lead incident analysis, root-cause investigation, and rapid containment while coordinating with cross-functional groups across regions.

The role requires 8+ years in Information Security with 5+ years in incident response, strong cloud and container security skills, and hands-on SIEM and scripting experience. Hybrid/international collaboration expected.

Qualifications

• 8+ years in information security with incident response specialization.
• 5+ years in CSIRT or digital forensics.
• Experience with Windows and Linux for investigations.
• Hands-on cloud security in AWS, Azure, etc.
• Proficiency with EDR, HIPS, DLP, IPS/IDS and cloud SIEM.
• Advanced log analysis from Web Security solutions (Akamai/Cloudflare).
• Ability to automate responses with Python/Bash/PowerShell.
• Container security expertise (Kubernetes, Docker).

Responsabilités

• Lead analysis and response to security incidents; perform root-cause analyses.
• Conduct advanced threat hunting using endpoints, servers, cloud and network data.
• Serve as senior escalation point for SOC; provide expert analysis.
• Improve incident response policies, playbooks, and SOC processes.
• Analyze web security events and mitigate using CDN protections.
• Collaborate with engineering and business teams; communicate findings clearly.
• Participate in on-call rotations for urgent incidents.

Connaissances

8+ years Information Security

5+ years CSIRT/Digital Forensics

Windows

Linux

Cloud (AWS/Azure)

EDR/HIPS/DLP/IPS/IDS

SIEM

Python/Bash/PowerShell

Kubernetes/Docker

Networking forensics

Certifications (GCIH/GCFA/GNFA/CISSP/3

Formation

Bachelor’s in Computer Science, Cybersecurity or equivalent

Outils

Akamai

Cloudflare

SIEM platforms

Description du poste

Overview

Farfetch is a leading global marketplace for the luxury fashion industry. The Farfetch Marketplace connects customers in over 190 countries and territories with items from more than 50 countries and over 1,400 of the world’s best brands, boutiques, and department stores, delivering a truly unique shopping experience and access to the most extensive selection of luxury on a global marketplace.

TECHNOLOGY

We’re on a mission to build end-to-end products and technology that powers an incredible e-commerce experience for luxury customers everywhere, understanding the motivations and needs of our customers and partners, to designing and testing hypotheses, to creating industry-leading experiences for luxury customers.

PORTO

Our office is near Porto, in the north of Portugal, and is located in a vibrant business hub. It offers a dynamic and welcoming environment where our employees can connect and network with a large community of tech professionals.

The Role

As a vital member of our Detection, Analysis, and Response Team (DART) - the specialized Incident Response unit within our Security Response team - you will serve as the "special forces" of our security organization. In this role, you must maintain a calm, collected demeanor during high-pressure, time-sensitive situations while thinking critically as both an attacker and a defender. You will collaborate with cross-functional teams to analyze, respond to, and neutralize threats with precision and speed. Security Response is responsible for responding to credible threats by developing advanced detective capabilities and identifying mitigations for complex vulnerabilities. Our DART Engineers are relentless problem-solvers who gather and analyze event data to conduct thorough root-cause analyses. This position is based at the Farfetch office in Porto, Portugal. The successful candidate will split their time and responsibilities between Coupang Corp and Farfetch, providing high-level security expertise to both organizations.

• Lead the analysis and response to security anomalies, intrusion attempts, and breaches; perform root-cause analysis, containment, and comprehensive post-incident reporting.
• Conduct advanced threat hunting to identify undetected threats using data from endpoints, servers, cloud environments, and network traffic.
• Act as the senior escalation point for the SOC, providing expert analysis on complex security tickets.
• Continuously improve incident response policies, playbooks, and SOC operational processes.
• Analyze and mitigate web-based security events using CDN security solutions (e.g., Akamai, Cloudflare).
• Collaborate effectively with internal engineering and business teams through clear, technical, and executive-level communication.
• Participate in an on-call rotation to respond to urgent security incidents or emerging threats.
• You have 8+ years in Information Security, with at least 5+ years specifically dedicated to Cyber Security Incident Response (CSIRT) or Digital Forensics.
• Experienced in host-based investigations across Windows, Linux, and various network/security appliances.
• A professional with hands-on experience analyzing security events within AWS, Azure or other major Cloud environments.
• Knowledgeable of analyzing events from EDR, HIPS, DLP, IPS/IDS, and SaaS solutions (e.g., Google Workspace, O365, Email Security).
• Proficient in managing and analyzing logs from Web Security solutions like Akamai or Cloudflare.
• Skilled in querying SIEM solutions and analyzing "big data" or high-volume logs to identify patterns of compromise.
• Able to automate response workflows and script in Python, Bash, or PowerShell.
• Graduate in Computer Science, Cybersecurity, or equivalent practical experience.
• Experience operating SIEM platforms and developing custom detection use cases.
• Deep understanding of container security and orchestration (Kubernetes, Docker).
• Advanced knowledge of network traffic/packet analysis and network forensics.
• Relevant industry certifications such as GCIH, GCFA, GNFA, CISSP, or OSCP.

Benefits and Diversity

• Health insurance for the whole family, flexible working environment and well-being support and tools
• Extra days off, sabbatical program and days for you to give back for the community
• Training opportunities
• Flexible benefits program
• Farfetch is an equal opportunities employer ensuring that all applicants are treated equally and fairly throughout our recruitment process. We are determined that no applicant experiences discrimination on the basis of sex, race, ethnicity, religion or belief, disability, age, gender identity, ancestry, sexual orientation, veteran status, marriage and civil partnership, pregnancy and maternity, or any other basis prohibited by applicable law.

Notice

It has come to our attention that there may be fraudulent activities involving individuals or organizations falsely claiming to represent Farfetch in order to attract candidates to a SCAM. Please be aware that Farfetch does not conduct recruitment processes through messaging apps or any unofficial communication channels, other than our official careers website. Additionally, Farfetch will never ask candidates for any form of payment during the recruitment process.