Tech Stack
Job Description, Responsibilities & Requirements
About the Position
Senior Security Engineer
Porto, Portugal
Farfetch - Technology – Information Security
Full-time / Hybrid
About the Role
Farfetch is a leading global marketplace for the luxury fashion industry. Our office near Porto, in the north of Portugal, is located in a vibrant business hub, offering a dynamic and welcoming environment for tech professionals.
As a vital member of our Detection, Analysis, and Response Team (DART) - the specialized Incident Response unit within our Security Response team - you will serve as the "special forces" of our security organization. In this role, you must maintain a calm, collected demeanor during high-pressure, time-sensitive situations while thinking critically as both an attacker and a defender. You will collaborate with cross-functional teams to analyze, respond to, and neutralize threats with precision and speed.
Responsibilities
- Lead the analysis and response to security anomalies, intrusion attempts, and breaches; perform root-cause analysis, containment, and comprehensive post-incident reporting.
- Conduct advanced threat hunting to identify undetected threats using data from endpoints, servers, cloud environments, and network traffic.
- Act as the senior escalation point for the Security Operations Center (SOC), providing expert analysis on complex security tickets.
- Continuously improve incident response policies, playbooks, and SOC operational processes.
- Analyze and mitigate web-based security events using CDN security solutions (e.g., Akamai, Cloudflare).
- Collaborate effectively with internal engineering and business teams through clear, technical, and executive-level communication.
- Participate in an on-call rotation to respond to urgent security incidents or emerging threats.
Requirements
- 8+ years in Information Security, with at least 5+ years specifically dedicated to Cyber Security Incident Response (CSIRT) or Digital Forensics.
- Experienced in host-based investigations across Windows, Linux, and various network/security appliances.
- Hands-on experience analyzing security events within AWS, Azure, or other major Cloud environments.
- Knowledgeable in analyzing events from EDR, HIPS, DLP, IPS/IDS, and SaaS solutions (e.g., Google Workspace, O365, Email Security).
- Proficient in managing and analyzing logs from Web Security solutions like Akamai or Cloudflare.
- Skilled in querying SIEM solutions and analyzing "big data" or high-volume logs to identify patterns of compromise.
- Able to automate response workflows and script in Python, Bash, or PowerShell.
- Graduate in Computer Science, Cybersecurity, or equivalent practical experience.
- Experience operating SIEM platforms and developing custom detection use cases.
- Deep understanding of container security and orchestration (Kubernetes, Docker).
- Advanced knowledge of network traffic/packet analysis and network forensics.
- Relevant industry certifications such as GCIH, GCFA, GNFA, CISSP, or OSCP.
We Offer
- Health insurance for the whole family
- Flexible working environment and well-being support and tools
- Extra days off, sabbatical program, and days for community service
- Training opportunities
- Flexible benefits program
Equal Opportunities Statement
Farfetch is an equal opportunities employer ensuring that all applicants are treated equally and fairly throughout our recruitment process. We are determined that no applicant experiences discrimination on the basis of sex, race, ethnicity, religion or belief, disability, age, gender identity, ancestry, sexual orientation, veteran status, marriage and civil partnership, pregnancy and maternity, or any other basis prohibited by applicable law.
Scam Disclaimer
Please be aware that there may be fraudulent activities involving individuals or organizations falsely claiming to represent Farfetch in order to attract candidates to a SCAM. Farfetch does not conduct recruitment processes through messaging apps or any unofficial communication channels, other than our official careers website. Additionally, Farfetch will never ask candidates for any form of payment during the recruitment process.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Apply for this job