Endpoint & SSE Security Engineer

ING Bank Personeel; Madrid; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Health insurance

Restaurant card

Flexible remuneration

Transport allowance

Pension plan

Office amenities and services

Job summary

ING Hubs Spain is seeking an Endpoint & SSE Security Engineer to join the Global CISO IT security team. The role focuses on maintaining SSE platforms, deploying web security and DLP controls, and collaborating across infrastructure and security groups to ensure secure cloud operations.

The candidate will participate in on-call rotations and contribute to incident response, while producing clear technical documentation and driving continuous service improvements. English proficiency is required.

Qualifications

• 3+ years in administration and management of proxy server environments.
• Experience securing workstations and endpoint devices.
• Knowledge of DLP technologies, processes, and controls.
• Experience implementing and maintaining web security and internet access control solutions.
• Understanding of SWG, proxy, URL filtering, and traffic inspection concepts.
• Knowledge of endpoint security technologies including malware protection and policy enforcement.
• Experience with Microsoft Entra ID and identity-related security controls.
• Experience troubleshooting network connectivity and security issues.
• Knowledge of networking concepts (TCP/IP, DNS, HTTP/HTTPS, proxy architectures).
• Strong analytical and problem solving skills; ability to identify risks and mitigations.
• Communication skills to cooperate with technical and business stakeholders.
• Willingness to participate in on-call rotation.
• Results-oriented mindset and continuous improvement.
• English level - C1

Responsibilities

• Maintain enterprise SSE platforms.
• Support deployment and adoption of web security, DLP, and internet access protection in SSE.
• Perform operational administration, maintenance, and troubleshooting of SSE services.
• Collaborate with infrastructure, networking, and security teams during projects.
• Participate in on-call support rotation and critical incident response.
• Develop and maintain technical documentation and procedures.
• Identify opportunities for automation and service improvement.
• Ensure stable and secure SSE operation.

Skills

Proxy security

DLP technologies

SWG/Proxy concepts

Endpoint security

Entra ID / identity security

Networking basics

On-call readiness

English (C1)

Tools

Microsoft Defender for Endpoint

Microsoft Purview

DNS / TCP/IP / HTTPs

Job description

Endpoint & SSE Security Engineer

At ING Hubs Spain we are looking for an Endpoint & SSE Security Engineer

Your role and work environment:

The team is a part of ING Global CISO department responsible for IT security within ING group and provides services for many organizational units all over the world. Join our dynamic team and become an integral part of our mission to ensure the security and resilience of our cloud infrastructure. We offer a collaborative work environment, opportunities for professional growth, and the chance to work with cutting-edge technologies.

Your key responsibilities:

• maintain enterprise Secure Service Edge (SSE) platforms
• support the deployment and adoption of web security, DLP, and internet access protection capabilities within the SSE ecosystem
• perform operational administration, maintenance, and troubleshooting of SSE services
• collaborate with infrastructure, networking, and security teams during solution implementation projects
• participate in an on-call support rotation and support critical incident response activities
• develop and maintain technical documentation and operational procedures
• identify opportunities for automation and continuous service improvement
• ensure stable and secure operation of the SSE environment

What are we looking for?

• at least 3 years of experience in administration and management of proxy server environments
• practical experience in securing workstations and endpoint devices
• knowledge of Data Loss Prevention (DLP) technologies, processes, and controls
• experience in implementing and maintaining web security and internet access control solutions
• understanding of Secure Web Gateway (SWG), proxy, URL filtering, and traffic inspection concepts
• knowledge of endpoint security technologies, including malware protection, device control, and security policy enforcement
• practical experience with Microsoft Entra ID and identity-related security controls
• experience in troubleshooting network connectivity and security-related issues
• knowledge of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, and proxy architectures
• strong analytical and problem-solving skills with the ability to identify risks and recommend appropriate mitigations
• communication skills with the ability to effectively cooperate with technical and business stakeholders
• readiness to participate in an on-call support rotation
• a results-oriented mindset with a focus on delivering high-quality outcomes and continuous improvement
• English level - C1

You’ll get extra points for:

• experience with Enterprise DLP solutions (e.g., Microsoft Purview, Symantec DLP, Forcepoint DLP)
• experience with cloud security technologies and Secure Service Edge (SSE) / SASE platforms
• knowledge of Microsoft Defender for Endpoint and Microsoft Purview
• familiarity with Zero Trust security principles
• experience with security monitoring and incident response processes
• knowledge of CASB technologies
• experience in automating operational tasks and reporting
• relevant security certifications

What do we offer?

• Be flexible my friend. Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.
• Restaurant card. So that thinking about what to have for lunch doesn't take up your time or your cravings.
• Our house will be your home. In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!
• Health insurance. For you and all your family (spouse/partner and children).
• Life insurance. We help you protect what matters most to you.
• Flexible remuneration. In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids...
• Transport allowance. It doesn't matter where you live, we'll help you get to the office.
• Pension plan. You can benefit from our pension plan after 1 month with us!

Discover ING Hubs Spain

ING is launching the new member of ING Hubs in Spain , an