🇬🇧
The English-language job board for Spain
92,000+ live jobsDFIR N3 Forensic and Incident Response Analyst
Hybrid in Spain·Full-time·Added 7 months ago (last checked 27 Oct)
Telefónica
218 open roles
Our summary
- Work mode
- Hybrid, Spain
- Contract
- Full-time
- English
- Required
- Experience
- 3+ years
- Education
- Higher vocational training (FP Grado Superior)
Visa options
The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Skills
Nice to have
This job advert was originally written in Spanish.
Requirements
What we're looking for
AND FOR THIS, WE BELIEVE IT WOULD BE IDEAL IF YOU HAD...
Experience
More than 3 years in cybersecurity, with at least 1 year in incident investigation and forensics.
Demonstrable experience in
Forensic analysis applied to IR.
Cybersecurity incident management.
Advanced forensics on Windows and Linux.
Dynamic analysis in sandbox environments (AnyRun, JoeSandbox, CAPE) and static tools (yara, CAPA, FLOSS).
Investigation in cloud environments (Microsoft, AWS, Google).
Cross-functional coordination between different areas.
Technical knowledge
Required:
Use of forensic solutions for evidence acquisition (triage or full acquisition).
Knowledge of file systems and operating systems (Windows, MacOS, iOS, Android).
Proficiency with forensic suites (Magnet AXIOM, X-Ways, KAPE, Nirsoft).
Knowledge of threat actor TTPs.
Key Competencies
We are looking for someone with teamwork skills, proactivity, problem-solving ability, client communication skills, creativity, and critical thinking.
Nice to have
Experience with English-speaking clients, knowledge of mobile device forensics, and a motivation for continuous learning will be valued.
Desirable: Certifications such as GCIH, GCFE, GCFA, GREM, CHFI.
Desirable:
General knowledge of IR and cybersecurity for log analysis (Firewalls, EDR, SIEM).
Forensic experience in Azure, AWS, or GCP.
Education & certifications
Education
Required: Higher Level Training (FP Superior) or a university degree in computer science or telecommunications.
Languages
English B2 or higher (spoken and written).
Pay & benefits
What you'll get
- Work-life balance measures and flexible working hours
- Ongoing training and certifications.
- Hybrid remote work model.
- Attractive social benefits package
- Excellent dynamic and multidisciplinary work environment
- Volunteering programs
The role
In the Digital Forensics and Incident Response (DFIR) unit at Telefónica Cybersecurity & Cloud Tech, we have a young and dynamic team responsible for managing our clients' main cybersecurity incidents. Our goal is to contain, analyze, and eradicate threats, guiding clients throughout the process and providing recommendations to prevent future incidents.
What you'll do
You will be part of the DFIR team, handling new incidents and providing continuity to ongoing investigations. Your responsibilities will include:
Conducting investigations in corporate environments and security incidents, identifying threats and suspicious activity.
Coordinating teams involved in incident response.
Collecting, preserving, and analyzing digital evidence, identifying the root cause and scope of the incident.
Examining security events, access logs, and other relevant data to reconstruct the attack sequence.
Using forensic tools to analyze systems, networks, and devices in search of IoCs or malicious activity.
Preparing detailed reports with findings and improvement recommendations.
Investigating intrusions, cloning devices, analyzing data, holding client meetings, and acting as an Incident Handler or technical analyst.
How you'll work
This position requires on-call availability.
About Telefónica
Telefónica is one of the world's largest telecommunications companies, providing fixed and mobile connectivity, digital services, and technology solutions to consumers and businesses across Europe and Latin America. With over 100,000 employees and a strong presence in Spain, the UK, Germany, and Brazil, the company operates through brands such as Movistar, O2, and Vivo, and has expanded into areas like cybersecurity, cloud, IoT, and AI through its innovation units.
In Spain, Telefónica is headquartered in Madrid and is a major employer of tech talent, with a strong focus on cybersecurity, data, and AI. The company actively hires international professionals, offering roles in English and fostering a diverse, innovative culture. Its Spanish operations are central to its global strategy, making it a relevant option for internationals seeking to work in a large, established tech and telecom player in Spain.
- Industry
- Telecom
- Founded
- 1924
- Employees
- 100,000+
- Headquarters
- Madrid, Spain
- In Spain
- Madrid, Barcelona
Good to know if you are moving
- Telefónica's Spanish offices are largely based in Madrid and Barcelona, with a significant tech hub in the Distrito Telefónica complex in Madrid.
- The company frequently hires international tech talent and many roles are offered in English, making it accessible for non-Spanish speakers.
- Telefónica has a strong commitment to innovation, with dedicated units like gAIt and Wayra focusing on AI and startups.
- The company offers a comprehensive relocation package and support for international hires, including visa assistance.
- With a global presence and a large Spanish operation, Telefónica provides opportunities for internal mobility across countries and roles.
In their own words
About the company & team
Telefónica Tech is the leading digital transformation company of the Telefónica Group. We offer a wide range of integrated technological services and solutions in Cybersecurity, Cloud, IoT, Big Data, Artificial Intelligence, and Blockchain, with which we support our clients in their digital transformation.
We are a group of over 6,200 brave people who work every day from different points around the world to achieve excellence, through leadership based on transparency and team spirit. If you identify with our pillars, we can't wait to meet you!
Additional information
#WeAreDiverse #WePromoteEquality
We are convinced that diverse and inclusive teams are more innovative, transformative, and achieve better results.
Therefore, we promote and guarantee the inclusion of all people regardless of gender, age, sexual orientation and identity, culture, disability, or any other condition.
We want to meet you! 😊
More jobs like this
or browse Security·Mid-level·Hybrid·IBEX 35·Telecommunications & Connectivity·Cybersecurity·Spanish Brands·Telecom
🇬🇧
2mo ago
Digital Forensic and Cybersecurity Incident Responder
On-site in Sant Cugat del Vallès
🇬🇧
🇬🇧
🇬🇧
1mo ago
Chief Information Security Officer - Tech Risk & Cybersecurity
Hybrid in Boadilla del Monte
🇬🇧
🇬🇧
🇬🇧
🇬🇧
🇬🇧