Senior Security Engineer

About the role

Farfetch is a leading global marketplace for the luxury fashion industry. The Farfetch Marketplace connects customers in over 190 countries and territories with items from more than 50 countries and over 1,400 of the world’s best brands, boutiques, and department stores, delivering a truly unique shopping experience and access to the most extensive selection of luxury on a global marketplace.

TECHNOLOGY

We're on a mission to build end-to-end products and technology that powers the an incredible e-commerce experience for luxury customers everywhere, understanding the motivations and needs of our customers and partners, to designing and testing hypotheses, to creating industry-leading experiences for luxury customers.

PORTO

Our office is near Porto, in the north of Portugal, and is located in a vibrant business hub. It offers a dynamic and welcoming environment where our employees can connect and network with a large community of tech professionals.

THE ROLE

As a vital member of our Detection, Analysis, and Response Team (DART) - the specialized Incident Response unit within our Security Response team - you will serve as the "special forces" of our security organization. In this role, you must maintain a calm, collected demeanor during high-pressure, time-sensitive situations while thinking critically as both an attacker and a defender. You will collaborate with cross-functional teams to analyze, respond to, and neutralize threats with precision and speed. Security Response is responsible for responding to credible threats by developing advanced detective capabilities and identifying mitigations for complex vulnerabilities. Our DART Engineers are relentless problem-solvers who gather and analyze event data to conduct thorough root-cause analyses. This position is based at the Farfetch office in Porto, Portugal. The successful candidate will split their time and responsibilities between Coupang Corp and Farfetch, providing high-level security expertise to both organizations.

WHAT YOU'LL DO - Lead the analysis and response to security anomalies, intrusion attempts, and breaches; perform root-cause analysis, containment, and comprehensive post-incident reporting.

- Conduct advanced threat hunting to identify undetected threats using data from endpoints, servers, cloud environments, and network traffic.

- Act as the senior escalation point for the SOC, providing expert analysis on complex security tickets.

- Continuously improve incident response policies, playbooks, and SOC operational processes.

- Analyze and mitigate web-based security events using CDN security solutions (e.g., Akamai, Cloudflare).

- Collaborate effectively with internal engineering and business teams through clear, technical, and executive-level

- communication. Participate in an on-call rotation to respond to urgent security incidents or emerging threats.

WHO YOU ARE - You have 8+ years in Information Security, with at least 5+ years specifically dedicated to Cyber Security Incident Response (CSIRT) or Digital Forensics.