Threat Engineer: Automations & Cloud Security

ING; Madrid; Hybrid; EUR 75,000 - 120,000; Full time

Benefits offered by this job

Restaurant card

Health insurance

Life insurance

Flexible remuneration

Transport allowance

Pension plan

Job summary

ING Hubs Spain, joining a global threat management initiative, is seeking a Threat Engineer to blend cybersecurity expertise with software engineering, cloud infrastructure and data analysis. You will design and operate automations to detect, investigate and respond to cyber threats at scale.

You will develop Python‑based tooling, deploy solutions on Azure, GCP and Databricks, and build integrations across data sources to deliver actionable insights for operational teams and executives.

Qualifications

• Experience translating complex cyber threat challenges into robust, data‑driven technical solutions.
• Strong Python development skills for analysis, automation and custom tooling, with practical experience using Jupyter Notebooks.
• Hands‑on experience deploying solutions across cloud environments such as Azure and Google Cloud Platform, using Terraform or comparable Infrastructure as Code solutions.
• Experience using GenAI or large language model capabilities selectively, securely and with a clear focus on measurable operational value.
• Solid understanding of cloud platforms, networking, system administration, infrastructure architecture and the operating model of CISO organisations in medium‑to‑large enterprises.
• Strong hands‑on experience diagnosing and resolving deployment, installation and integration issues across cloud environments, infrastructure components and custom‑built tools.
• Ability to design end‑to‑end solutions and translate complex system landscapes into clear, implementable designs.
• Experience building and maintaining CI/CD pipelines and working with version‑control systems such as Git.
• Familiarity with malware behaviour, threat actors and adversary tactics, techniques and procedures.
• Curiosity, strong problem‑solving skills and the ability to collaborate proactively and communicate clearly with technical and non‑technical stakeholders.

Responsibilities

• Design and implement scalable automations to enhance threat detection, prioritisation and investigation.
• Co-create intelligence‑driven security solutions with threat intelligence specialists and architects.
• Ensure large‑scale security telemetry and threat data are transformed into actionable insights for operations and execs.
• Automate and accelerate threat analysis using Python and tooling.
• Deploy and operate infrastructure and automations on Azure, Google Cloud Platform and Databricks, ensuring scalability and governance.
• Design integrations across data sources and security tools to improve detection and analysis.
• Leverage GenAI selectively to streamline workflows and add operational value.
• Create clear technical documentation and visuals for stakeholders.
• Maintain, troubleshoot and resolve deployment and integration issues across cloud infrastructure and tools.
• Build and maintain CI/CD pipelines and adhere to version‑control practices.

Skills

Python

Cloud (Azure & GCP)

Automation

Threat detection

CI/CD pipelines

Terraform

GenAI tooling

Tools

Databricks

Jupyter Notebooks

Git

Job description

ING Hubs Spain, joining a global threat management initiative, is seeking a Threat Engineer to blend cybersecurity expertise with software engineering, cloud infrastructure and data analysis. You will design and operate automations to detect, investigate and respond to cyber threats at scale.

You will develop Python‑based tooling, deploy solutions on Azure, GCP and Databricks, and build integrations across data sources to deliver actionable insights for operational teams and executives.