3 days ago
Madrid, SpainSenior
Responsibilities
- Design and implement scalable automations that improve cyber-threat detection, prioritisation, and investigation.
- Co-create intelligence-driven security solutions with threat intelligence specialists, cybersecurity experts, and architects.
- Transform security telemetry and threat intelligence data into actionable operational and executive insights.
- Develop automation and threat-analysis tooling primarily in Python, including work with Jupyter Notebooks.
- Deploy and operate infrastructure and automations on Azure, Google Cloud Platform, and Databricks.
- Design integrations across data sources, security tools, and services.
- Use AI, GenAI, and automation selectively and securely to improve threat-intelligence workflows.
- Create technical documentation, diagrams, visualisations, and recommendations for technical and non-technical stakeholders.
- Troubleshoot deployment, installation, configuration, and integration issues across cloud infrastructure and security tooling.
- Build and maintain CI/CD pipelines and apply version-control practices for reliable delivery.
Requirements
- Strong Python development skills for analysis, automation, and custom tooling, with practical Jupyter Notebooks experience.
- Hands-on experience deploying solutions on Azure and Google Cloud Platform using Terraform or comparable infrastructure-as-code solutions.
- Experience using GenAI or large language model capabilities securely and for measurable operational value.
- Strong understanding of cloud platforms, networking, system administration, infrastructure architecture, and CISO operating models in medium-to-large enterprises.
- Hands-on experience diagnosing and resolving deployment, installation, and integration issues across cloud environments and custom-built tools.
- Ability to design end-to-end solutions and convert complex system landscapes into implementable designs.
- Experience building and maintaining CI/CD pipelines and using version-control systems such as Git.
- Familiarity with malware behaviour, threat actors, and adversary tactics, techniques, and procedures.
- Experience with threat-intelligence platforms, data feeds, and threat-intelligence terminology is preferred.
- Experience with Databricks, data engineering, or large-scale data-processing platforms is preferred.
- Experience building AI or GenAI solutions using LLMs and automation frameworks is preferred.
- Experience with security automation and orchestration platforms is preferred.
- Practical understanding of Cyber Kill Chain and MITRE ATT&CK is preferred.
- Strong problem-solving, collaboration, curiosity, and communication skills.
Benefits
- Flexible hybrid working, with employees determining home and office days together with ING.
- Restaurant card, transport allowance, and flexible remuneration options including nursery, transport, and training support.
- Health insurance for the employee and family, life insurance, and access to a pension plan after one month.
- Office amenities including electric mobility solutions, a doctor, hairdresser, gym, and errand-support service.
- Opportunity to work in ING Hubs Spain on global technology serving more than 34 million customers across over 38 countries.
About ING
ING is a Dutch multinational bank providing retail, private, and wholesale banking, with strong digital and mobile services for consumers and businesses. Founded in 1991 and headquartered in Amsterdam, it operates across Europe and beyond, earning revenue from interest income, fees, and financial services. ING is a public company with shares traded in New York.