Threat Engineer

ING HUBS SPAIN; Madrid; Hybrid; EUR 75,000 - 120,000; Full time

Benefits offered by this job

Restaurant card

Health insurance

Life insurance

Flexible remuneration

Transport allowance

Pension plan

Job summary

ING Hubs Spain, joining a global threat management initiative, is seeking a Threat Engineer to blend cybersecurity expertise with software engineering, cloud infrastructure and data analysis. You will design and operate automations to detect, investigate and respond to cyber threats at scale.

You will develop Python‑based tooling, deploy solutions on Azure, GCP and Databricks, and build integrations across data sources to deliver actionable insights for operational teams and executives.

Qualifications

• Experience translating complex cyber threat challenges into robust, data‑driven technical solutions.
• Strong Python development skills for analysis, automation and custom tooling, with practical experience using Jupyter Notebooks.
• Hands‑on experience deploying solutions across cloud environments such as Azure and Google Cloud Platform, using Terraform or comparable Infrastructure as Code solutions.
• Experience using GenAI or large language model capabilities selectively, securely and with a clear focus on measurable operational value.
• Solid understanding of cloud platforms, networking, system administration, infrastructure architecture and the operating model of CISO organisations in medium‑to‑large enterprises.
• Strong hands‑on experience diagnosing and resolving deployment, installation and integration issues across cloud environments, infrastructure components and custom‑built tools.
• Ability to design end‑to‑end solutions and translate complex system landscapes into clear, implementable designs.
• Experience building and maintaining CI/CD pipelines and working with version‑control systems such as Git.
• Familiarity with malware behaviour, threat actors and adversary tactics, techniques and procedures.
• Curiosity, strong problem‑solving skills and the ability to collaborate proactively and communicate clearly with technical and non‑technical stakeholders.

Responsibilities

• Design and implement scalable automations to enhance threat detection, prioritisation and investigation.
• Co-create intelligence‑driven security solutions with threat intelligence specialists and architects.
• Ensure large‑scale security telemetry and threat data are transformed into actionable insights for operations and execs.
• Automate and accelerate threat analysis using Python and tooling.
• Deploy and operate infrastructure and automations on Azure, Google Cloud Platform and Databricks, ensuring scalability and governance.
• Design integrations across data sources and security tools to improve detection and analysis.
• Leverage GenAI selectively to streamline workflows and add operational value.
• Create clear technical documentation and visuals for stakeholders.
• Maintain, troubleshoot and resolve deployment and integration issues across cloud infrastructure and tools.
• Build and maintain CI/CD pipelines and adhere to version‑control practices.

Skills

Python

Cloud (Azure & GCP)

Automation

Threat detection

CI/CD pipelines

Terraform

GenAI tooling

Tools

Databricks

Jupyter Notebooks

Git

Job description

At ING Hubs Spain we are looking for a Threat Engineer in Threat Management Your role and work environment: We are looking for a talented and enthusiastic Threat Engineer to join our Global Threat Management Team within the Cyber Threat Management area. The responsibility of this team is to transform threat intelligence and security telemetry into actionable insights that strengthen detection, prioritisation and cybersecurity decision-making, and our way of working is based on data-driven analysis, cloud engineering, automation and close collaboration with threat intelligence and cybersecurity specialists. In this role, you will combine cybersecurity expertise with software engineering, cloud infrastructure and data analysis. You will design and operate automations and integrations that help ING identify, investigate and respond to cyber threats more effectively across a complex global environment.

Your key responsibilities

As a Threat Engineer you will:

• Positively contribute to the detection, prioritisation and investigation of cyber threats by designing and implementing scalable automations.
• Co-create intelligence-driven security solutions with threat intelligence specialists, cybersecurity experts and architects.
• Ensure large-scale security telemetry and threat intelligence data are transformed into actionable insights for operational teams and executive decision‑making.
• Automate and accelerate threat analysis using standard and custom-built tooling, primarily developed in Python.
• Deploy and operate infrastructure and automations on cloud and data platforms such as Azure, Google Cloud Platform and Databricks, ensuring scalability, reliability and governance.
• Design integrations across data sources, security tools and services to improve intelligence-driven detection and analysis.
• Leverage AI, GenAI and automation selectively and securely to streamline workflows, enrich threat intelligence processes and deliver measurable operational value.
• Create clear technical documentation, diagrams and visualisations to communicate solutions, insights and recommendations to technical and non-technical stakeholders.
• Maintain, troubleshoot and resolve deployment, installation, configuration and integration issues across cloud infrastructure, security tooling and custom‑built solutions.
• Build and maintain CI/CD pipelines and use version‑control practices to support reliable and repeatable delivery.

What are we looking for?

Want to know if this job is made for you? These are some of the qualities that we value the most for this role.

• Experience translating complex cyber threat challenges into robust, data‑driven technical solutions.
• Strong Python development skills for analysis, automation and custom tooling, with practical experience using Jupyter Notebooks.
• Hands‑on experience deploying solutions across cloud environments such as Azure and Google Cloud Platform, using Terraform or comparable Infrastructure as Code solutions.
• Experience using GenAI or large language model capabilities selectively, securely and with a clear focus on measurable operational value.
• Solid understanding of cloud platforms, networking, system administration, infrastructure architecture and the operating model of CISO organisations in medium‑to‑large enterprises.
• Strong hands‑on experience diagnosing and resolving deployment, installation and integration issues across cloud environments, infrastructure components and custom‑built tools.
• Ability to design end‑to‑end solutions and translate complex system landscapes into clear, implementable designs.
• Experience building and maintaining CI/CD pipelines and working with version‑control systems such as Git.
• Familiarity with malware behaviour, threat actors and adversary tactics, techniques and procedures.
• Curiosity, strong problem‑solving skills and the ability to collaborate proactively and communicate clearly with technical and non‑technical stakeholders.

Nice to have

• Experience with threat intelligence platforms, data feeds and standard threat intelligence terminology.
• Experience with Databricks, data engineering or large‑scale data‑processing platforms.
• Experience building AI or GenAI solutions using LLMs and automation frameworks.
• Experience with security automation and orchestration platforms.
• Practical understanding of threat‑modelling frameworks such as Cyber Kill Chain and MITRE ATT&CK, and their application to detection and analysis.

What do we offer?

The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfil you in every way, and that is why we take care of even the smallest details.

Check out what is waiting for you! Be flexible my friend. Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.

• Restaurant card.
• Health insurance. For you and all your family (spouse/partner and children).
• Life insurance. We help you protect what matters most to you.
• Flexible remuneration. In addition, you will enjoy our flexible remuneration model, through a more tax‑advantaged way, you will be able to access other services such as nursery, transport card, training aids…
• Transport allowance. It doesn't matter where you live, we’ll help you get to the office.
• Pension plan. You can benefit from our pension plan after 1 month with us!

Discover ING Hubs Spain

We’re building something exciting—and we want you to be part of it. ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers.

ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.

What makes us different?

We have a tech‑first mindset: We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a centre of excellence for scalable, fast, and secure technology. We have global impact: You’ll be working on solutions that serve more than 34 million of customers in over 38 countries. We are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross‑functional way of working. Sustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact. At ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning. We’re looking for curious minds, bold builders, and passionate problem‑solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you.

#LI-DNI We’re a global bank with a strong European base, and our more than 60,000 colleagues serve around 38 million customers and corporate clients in over 40 countries. Joining ING means working with friendly and collaborative people towards making a positive impact on people and planet. We believe in empowering the people around us and our customers to stay a step ahead. Working here means having the autonomy to drive progress, helping to create superior customer value and contributing to our ambition of putting sustainability at the heart of everything we do. Here, we’re more than just a workplace – we’re a community of innovators, problem‑solvers, and forward‑thinkers, dedicated to making a real impact. Whether you’re just starting your career or seeking the next big challenge, we have opportunities that will inspire and push you to grow. Your future at ING starts with one application. Ready to join? We’ve got plenty of opportunities to match your skills and aspirations! Use the filters below the search bar – like location and job type – to help you find the perfect fit. Start exploring now and discover where your next career move could take you!