Tech Stack
Job Description, Responsibilities & Requirements
About the Position
Security Engineering Lead
Porto, Portugal
Farfetch - Technology – Information Security
Full-time / Hybrid
Responsibilities
As the regional lead for our Detection, Analysis, and Response Team (DART) in Portugal, you will:
- Act as the functional lead for the Porto DART unit, managing local team members and overseeing the day-to-day security response operations for the region.
- Manage security response workflows and collaboration across both Coupang and Farfetch environments.
- Lead and coordinate responses to complex security anomalies, intrusion attempts, and breaches; oversee root-cause analysis and comprehensive executive reporting.
- Drive advanced threat-hunting initiatives across cloud, endpoint, and network environments to identify undetected threats.
- Serve as the final escalation point for the SOC and provide expert guidance and technical mentorship to Senior engineers and analysts.
- Continuously improve and standardize incident response policies, automated playbooks, and SOC operational processes.
- Partner with global engineering and business leaders through clear, technical, and executive-level communication to neutralize threats and mitigate vulnerabilities.
- Participate in and oversee the on-call rotation to ensure 24/7 response readiness for urgent security events.
Requirements
- ~10 years experience in Information Security, with at least 7+ years specifically dedicated to Cyber Security Incident Response (CSIRT) or Digital Forensics.
- Experienced in a lead or managerial role, preferably within a global or regional office structure.
- Advanced hands-on experience analyzing and securing events within AWS, Azure, or other major Cloud environments.
- Expert in host-based investigations (Windows/Linux) and analyzing logs from EDR, HIPS, DLP, and SaaS solutions.
- Mastery of querying SIEM solutions and analyzing high-volume "big data" logs to identify sophisticated patterns of compromise.
- Ability to lead the automation of response workflows using Python, Bash, or PowerShell.
- Knowledgeable of mitigating web-based security events using CDN solutions like Akamai or Cloudflare.
- Graduate in Computer Science, Cybersecurity, or equivalent practical experience.
- Advanced industry credentials such as GCIH, GCFA, GNFA, CISSP, or OSCP.
- Deep understanding of container security (Kubernetes, Docker) and network forensics (packet analysis).
- Experience operating SIEM platforms and developing custom detection use cases.
- Fluency in English is required; proficiency in Portuguese or Korean is a plus for regional and headquarters coordination.
We Offer
- Health insurance for the whole family, flexible working environment, and well-being support and tools.
- Extra days off, sabbatical program, and days for community service.
- Training opportunities.
- Flexible benefits program.
About the Company
Farfetch is a leading global marketplace for the luxury fashion industry. The Farfetch Marketplace connects customers in over 190 countries and territories with items from more than 50 countries and over 1,400 of the world’s best brands, boutiques, and department stores, delivering a truly unique shopping experience and access to the most extensive selection of luxury on a global marketplace.
Equal Opportunities Statement
Farfetch is an equal opportunities employer ensuring that all applicants are treated equally and fairly throughout our recruitment process. We are determined that no applicant experiences discrimination on the basis of sex, race, ethnicity, religion or belief, disability, age, gender identity, ancestry, sexual orientation, veteran status, marriage and civil partnership, pregnancy and maternity, or any other basis prohibited by applicable law.
Scam Disclaimer
It has come to our attention that there may be fraudulent activities involving individuals or organizations falsely claiming to represent Farfetch in order to attract candidates to a SCAM. Please be aware that Farfetch does not conduct recruitment processes through messaging apps or any unofficial communication channels, other than our official careers website. Additionally, Farfetch will never ask candidates for any form of payment during the recruitment process.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.