At ING Hubs Spain we are looking for a Threat Intelligence Expert
Your role and work environment:
Do you want to use cyber threat intelligence to protect a global bank from real and evolving cyber threats?
As a Threat Intelligence Expert in Cyber Threat Management, you will turn large‑scale security and threat data into actionable intelligence. You will analyse and assess advanced cyber threats, threat actors, and attack scenarios to deliver actionable intelligence that helps ING anticipate, prioritise, and mitigate cyber risks.
The team
You will join ING’s Global Threat Management (GTM) team, a central capability within the CISO domain that focuses on intelligence‑driven, proactive defence.
The team works across geographies and disciplines to anticipate emerging threats, investigate advanced attack scenarios, and continuously improve ING’s detection and defensive posture. Collaboration, communication, ownership, and impact are core to how we work.
Your key responsibilities:
As a Threat Intelligence Expert, you will:
- Collect, analyse, and assess internal and external threat intelligence to identify threats relevant to ING.
- Develop and maintain tracking of threat actors, tactics, techniques, and procedures (TTPs) targeting the financial sector.
- Analyse emerging threats, campaigns, and attack patterns, translating findings into clear threat assessments.
- Map threats and scenarios to MITRE ATT&CK, kill chain, and threat models to articulate risk and exposure.
- Apply automation and AI techniques to accelerate threat analysis, pattern discovery, and hypothesis testing.
- Collaborate with cyber threat hunters and detection teams to operationalise analytics into real‑world security use cases.
- Produce high‑quality intelligence products (threat assessments, scenario analyses, briefings) for technical and non‑technical stakeholders.
- Provide clear, actionable recommendations to support prioritisation, mitigation, and decision‑making.
- Contribute to executive‑ready reporting by articulating threat relevance, likelihood, and potential impact to ING.
- Support situational awareness during significant cyber events or crisis situations.
- Perform continuous horizon scanning to identify emerging trends, technologies, and threat developments.
- Contribute to forward‑looking threat scenarios and forecasting to support strategic planning.
- Assess how external developments may impact ING’s threat landscape over time.
- Engage with internal stakeholders across GTM, CISO, IT, fraud, and business domains to understand intelligence requirements.
- Act as a trusted subject‑matter expert, advising stakeholders on threat relevance and security implications.
- Contribute to knowledge sharing and collaboration across teams to improve threat awareness and response.
- Work independently on complex analyses while collaborating within the Threat Intelligence team.
- Contribute to the improvement of threat intelligence processes, methodologies, and tradecraft.
- Support the development and mentoring of less experienced analysts when required.
- Ensure intelligence activities are aligned with ING policies, standards, and governance.
What are we looking for?
Want to know if this job is the right fit for you? These are some of the qualities we value most for this role. And if the shoe fits… don’t hesitate to apply!
We are looking for you, if you have:
- A degree in Computer Science, Cyber Security, Data Science, Engineering, or a related field, or equivalent practical experience.
- English-C1/B2
- Translate complex cyber threat problems into clear, data‑driven insights and recommendations that support decision‑making.
- Apply structured analytical thinking to threat intelligence, using data, tooling, and frameworks in a practical and outcome‑focused way.
- Work confidently with large, diverse, and imperfect data sets, drawing sound conclusions despite uncertainty.
- Partner effectively with cyber security, detection, and risk teams to ensure intelligence leads to real operational and strategic impact.
- Balance innovation with governance, ensuring quality, traceability, and explainability of intelligence outputs.
- Communicate insights clearly and convincingly, adapting messages for technical experts and senior stakeholders.
- Take ownership of your work, continuously improving tradecraft, methods, and processes.
- Stay curious about the evolving threat landscape and actively invest in continuous learning and professional development.
- Experienced with vulnerability and compliance scanning solutions with a solid understanding of remediation workflows.
- Strong technical foundation across Windows/Linux servers and network infrastructure, including firewalls, proxies, and switching technologies.
- Hands‑on scripting capability in Python, PowerShell or Bash to automate tasks, analyze data, or support operational security functions.
You'll get extra points for:
- Relevant certifications in cyber threat intelligence, cyber security, cloud platforms, data analytics, or security frameworks are an advantage.
What do we offer?
The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details.
Check out what is waiting for you!
Be flexible my friend.
Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.
Restaurant card.
So that thinking about what to have for lunch doesn’t take up your time or your cravings.
Our house will be your home.
In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!
Health insurance.
For you and all your family (spouse/partner and children).
Life insurance.
We help you protect what matters most to you.
Flexible remuneration.
In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids…
Transport allowance.
It doesn't matter where you live, we’ll help you get to the office.
Pension plan.
You can benefit from our pension plan after 1 month with us!
Discover ING Hubs Spain
We’re building something exciting—and we want you to be part of it.
ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.
What makes us different?
We have a tech-first mindset: We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology.
We have global impact: You’ll be working on solutions that serve more than 34 million of customers in over 38 countries.
We are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working.
Sustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.
At ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning.
We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you.
#LI-DNI
