Santander

Cyber - Digital Forensics & Incident Response Analyst (DFIR) - SDS

In short

DFIR Analyst role at Santander Digital Services' Global CERT team in Boadilla del Monte, Spain, handling complex digital forensics and incident response investigations across *Nix, MacOS, Windows and Android platforms. The role involves forensic artifact acquisition and analysis, SIEM log correlation, and technical/executive incident reporting. Requires demonstrable DFIR or SOC/CSIRT experience, hands-on Windows/Linux forensic work, and advanced English; SIEM knowledge, forensic tools (EnCase, Cellebrite, Nuix) and blue team certifications are valued.

Cyber - Digital Forensics & Incident Response Analyst (DFIR) - SDS
Country: Spain
IT'S THE MOMENT
Santander (www.santander.com) is evolving from a high-impact global brand into a technology-driven organization, and our people are at the center of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation and the courage to challenge what's possible.
This is more than a strategic shift. It's an opportunity for motivated professionals to grow, learn and make a real difference.
Our mission is to help contribute to more people and businesses prospering. We embrace a strong risk culture and expect all our professionals at all levels to take a proactive and responsible approach to risk management.
Santander Digital Services is Santander's technology and operations team. We are convinced of the importance of technology that is aligned with business requirements and that our work not only brings value to users, people and communities, but also fosters individual creativity. Our team of more than 10,000 people in 8 countries (Spain, Portugal, Poland, United Kingdom, USA, Mexico, Chile and Brazil) develops and/or implements financial solutions across a wide range of technologies (including Blockchain, Big Data and Angular, among others) on all kinds of local and cloud-based platforms.
THE DIFFERENCE YOU MAKE
Santander Digital Services is looking for a DFIR Analyst to work at our offices located in Boadilla del Monte, for the Global CERT, a key team in our technology ecosystem.
We are shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for:
•Participating in complex Digital Forensics & Incident Response (DFIR) investigations, including complex and advanced engagements.
•Acquisition and analysis of forensic artifacts across different platforms (*Nix, MacOS, Windows, Android, among others) to determine the vector of compromise, the scope of the incident and the attacker's actions.
•Searching, correlating and analyzing logs in SIEM environments.
•Preparing technical and executive reporting of cases.
•Identifying and proposing improvements to technological risks and controls within the Group.
WHAT YOU WILL BRING
Our people are our greatest strength. Each individual brings unique perspectives that make us stronger as a team and as an organization. We are enabling teams to go further by valuing who they are and empowering what they bring.
The following requirements represent the knowledge, skills and abilities essential for success in this role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Professional experience
•Demonstrable experience in Digital Forensics & Incident Response (DFIR), digital forensic analysis or in a SOC or CSIRT environment.
•Hands-on experience in analysis and acquisition of artifacts in Windows and/or Linux environments.
•Participation in the management of security incidents in corporate or similar environments.
•Motivation to deepen technically and evolve towards managing complex investigations in a global environment.
Education
•Higher vocational training (CFGS), a degree in a technological field, or demonstrable equivalent experience in cybersecurity/digital forensics.
Languages
•Advanced level English in an international professional environment. (Required)
Hard skills
•Knowledge of some SIEM (Splunk, Crowdstrike, QRadar or other similar).
•Solid knowledge of Windows and/or Linux operating systems from a technical perspective.
•Experience with forensic tools such as EnCase, Cellebrite, Nuix or others similar. (Valued)
•Certifications such as CompTIA Security+, CySA+, eCIR, Blue Team Level 1/2, or other training related to incident analysis or blue team. (Valued)
Soft skills
•Technical curiosity and continuous learning mindset.
•Analytical ability, communication and attention to detail.
•Ability for clear and concise technical writing.
•Good team spirit.
WE VALUE YOUR IMPACT
Your contribution matters and is recognized. You can expect a fair and competitive rewards package that reflects the impact you create and the value you deliver. But we know that rewards go beyond numbers.
•We enable our teams to go further through global opportunities and broad career paths.
•Flexibility that works. Enjoy hybrid work models, some remote days, other days on-site with your team, along with flexible schedules.
•Lifelong learning. Access hundreds of courses on our platforms, including exclusive access to our global learning space: Santander Open Academy (www.santanderopenacademy.com).
•Competitive rewards. Receive a highly competitive salary with performance-based bonuses, motivating you to keep growing with us.
•Financial advantages. Benefit from preferential banking conditions, special interest rates on loans, life insurance and more.
•Your health is our priority. Through BeHealthy, our global wellness program, we promote holistic well-being.
•We know that family is everything. That's why we offer childcare support and family programs tailored to every life stage.
•Always by your side. Access Santander Contigo, our program for employees and their families offering legal, emotional and administrative advisory services.
•Additional benefits. Gym/WellHub membership, medical centers at some of our facilities, meal subsidy, parking, transport service from various points in Madrid, as well as exclusive discounts and offers for Santander employees. And that's just the beginning — we'll tell you more when you join!
We are here to keep you motivated, help you achieve your goals and celebrate your progress, every step of the way.
LOCAL COMPLIANCE
Santander is proud to be an equal opportunity organization regardless of age, gender, disability, marital status, race, religion or sexual orientation. We are committed to providing an inclusive and accessible application process for all candidates.
WHAT TO DO NEXT
If this sounds like a position that interests you, submit your application.
Ready to take the next step in your journey?

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot