Endpoint & SSE Security Engineer

ING Hubs Spain; Madrid; Hybrid; EUR 55,000 - 90,000; Full time

Benefits offered by this job

Health insurance

Life insurance

Pension plan

Flexible remuneration

Job summary

ING Hubs Spain is seeking an Endpoint & SSE Security Engineer to protect and optimize our cloud security stack. You will deploy and manage web security, DLP, and SSE services, working with infrastructure, networking, and security teams across projects.

You will participate in on-call rotations, develop documentation, and pursue continuous improvement in security operations. This role reports into ING’s global CISO function and supports a growing European footprint.

Qualifications

• 3+ years in administration and management of proxy server environments.
• Practical experience securing workstations and endpoint devices.
• Knowledge of DLP technologies, processes and controls.
• Experience implementing and maintaining web security and internet access controls.
• Understanding of SWG, proxy, URL filtering and traffic inspection concepts.
• Knowledge of endpoint security technologies including malware protection and policy enforcement.
• Experience with Microsoft Entra ID and identity security controls.
• Networking knowledge including TCP/IP, DNS and HTTP/HTTPS.
• Willingness to participate in on-call support rotation and incident response.
• Experience with SSE/SASE platforms and cloud security.
• Familiarity with Defender for Endpoint and Purview.
• Security certifications or equivalent demonstrated training.

Responsibilities

• Support deployment and adoption of web security and DLP within SSE ecosystem.
• Operate and troubleshoot SSE services and proxy architectures.
• Collaborate with infrastructure, networking and security teams on projects.
• Participate in on-call rotations and critical incident response.
• Develop and maintain technical documentation and runbooks.
• Identify automation opportunities and drive continuous service improvement.
• Ensure stable, secure operation of SSE environment.

Skills

Proxy administration

Endpoint security

DLP technologies

Web security

SSE/SASE

SWG concepts

Zero Trust

Microsoft Entra ID

On-call readiness

Automation & reporting

Security certifications

Tools

Microsoft Purview

Microsoft Defender for Endpoint

CASB

SSE platforms

Job description

At ING Hubs Spain we are looking for an Endpoint & SSE Security Engineer

Your role and work environment:

The team is a part of ING Global CISO department responsible for IT security within ING group and provides services for many organizational units all over the world.

Join our dynamic team and become an integral part of our mission to ensure the security and resilience of our cloud infrastructure. We offer a collaborative work environment, opportunities for professional growth, and the chance to work with cutting-edge technologies.

The role naming convention in the global ING job architecture will be “Engineer IV”.

Your key responsibilities:

• support the deployment and adoption of web security, DLP, and internet access protection capabilities within the SSE ecosystem,
• perform operational administration, maintenance, and troubleshooting of SSE services,
• collaborate with infrastructure, networking, and security teams during solution implementation projects,
• participate in an on-call support rotation and support critical incident response activities,
• develop and maintain technical documentation and operational procedures,
• identify opportunities for automation and continuous service improvement,
• ensure stable and secure operation of the SSE environment.

What are we looking for?

We are looking for you if you have:

• at least 3 years of experience in administration and management of proxy server environments,
• practical experience in securing workstations and endpoint devices,
• knowledge of Data Loss Prevention (DLP) technologies, processes, and controls,
• experience in implementing and maintaining web security and internet access control solutions,
• understanding of Secure Web Gateway (SWG), proxy, URL filtering, and traffic inspection concepts,
• knowledge of endpoint security technologies, including malware protection, device control, and security policy enforcement,
• practical experience with Microsoft Entra ID and identity-related security controls,
• experience in troubleshooting network connectivity and security-related issues,
• knowledge of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, and proxy architectures,
• strong analytical and problem-solving skills with the ability to identify risks and recommend appropriate mitigations,
• communication skills with the ability to effectively cooperate with technical and business stakeholders,
• readiness to participate in an on-call support rotation,
• a results-oriented mindset with a focus on delivering high-quality outcomes and continuous improvement.
• experience with Enterprise DLP solutions (e.g., Microsoft Purview, Symantec DLP, Forcepoint DLP),
• experience with cloud security technologies and Secure Service Edge (SSE) / SASE platforms,
• knowledge of Microsoft Defender for Endpoint and Microsoft Purview,
• familiarity with Zero Trust security principles,
• experience with security monitoring and incident response processes,
• knowledge of CASB technologies,
• experience in automating operational tasks and reporting,
• relevant security certifications

What do we offer?

The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details.

Check out what is waiting for you!

Be flexible my friend.

Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.

So that thinking about what to have for lunch doesn’t take up your time or your cravings.

Our house will be your home.

In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!

Health insurance.

For you and all your family (spouse/partner and children).

Life insurance.

We help you protect what matters most to you.

Flexible remuneration.

In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids…

It doesn't matter where you live, we’ll help you get to the office.

Pension plan.

You can benefit from our pension plan after 1 month with us!

Discover ING Hubs Spain

We’re building something exciting—and we want you to be part of it.

ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.

What makes us different?

We have a tech-first mindset: We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology. We have global impact: You’ll be working on solutions that serve more than 34 million of customers in over 38 countries. We are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working. Sustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.

At ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning.

We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you.