Security Operations Engineer | Information Security @ ING Bank

Mission

We are looking for an experienced and enthusiastic Security Operations Engineer with strong technical background and excellent communication skills. Technology plays a crucial role for ING to achieve its strategic objectives.

As a Security Operations Engineer you will use your skills to help develop, design and drive implementation of information security controls in IT systems and business processes while protecting the IT systems and securing access to data.

About the team

Security Operations Team is responsible for protecting the organization's digital assets through continuous monitoring, vulnerability management, security reviews, incident response, and governance activities. The team drives proactive threat detection, coordinates remediation efforts, and supports secure delivery practices to maintain a resilient and compliant security posture. Our main goal is to safeguard the organization by detecting and responding to threats, managing vulnerabilities, and ensuring security controls are effectively implemented and maintained.

Your day to day

Your responsibilities include:

• Conduct application and infrastructure security and vulnerability assessment;
• Perform proactive research to identify and understand new threats, vulnerabilities and exploits;
• Support IT department and business functions on setting up controls to proactively manage the information security related risks;
• Support bank projects and changes from the perspective of IT and Information Security;
• Internal contact for questions related to IT and Information Security;
• Advice and support regarding Information Security requirements for IT Assets and processes;
• Participate in the implementation of the security architecture, both in terms of infrastructure and applications;
• Review and approve the operational security guidelines (OSG) developed for IT Assets;
• Perform threat modelling to detect threats related to applications or new functionalities;
• Act as subject matter expert from IT Security perspective in risk assessment sessions;
• Monitor scope and effectiveness security controls in IT processes (e.g. patching, vulnerability management, lifecycle management, external connections management, security event monitoring, technical state compliance monitoring, penetration testing, change management, etc.);
• Investigate security incidents and define remediation plans accordingly;
• Security Incident Response: Coordination of the security incident response from initiation to conclusion. Assess the security incident, determine required resources necessary to mitigate the incident and coordinate resolution. Documents all activities during the security incident following the established process and conducts lessons learned exercises to make recommendations to stakeholders;
• Cyber Intelligence analysis: Collects network information and analyses them to detect threats and malware impacting the local systems. Investigates the threat posed by an attack and makes recommendation on the actions the be taken;
• Previous network engineering and systems administration experience is required to fully understand the threat landscape.

What you bring to the team

• Knowledge of following areas: Security architecture, Malware, Penetration testing, Network architecture, Application architecture, Unix, Cisco, & Wintel platforms, Information security policies and procedures, SDLC, Static Application Security Testing and Software Composition Analysis tools, Cloud security, CI/CD, Pipelines.
• Knowledge and understanding of OWASP and security standards like ISO 27001/27002.
• A challenger and networker who adds value to the team.
• Analytical and synthetic turn of mind.
• Excellent communicator, who can be assertive towards multiple stakeholders;
• Team worker but also able to work independently.
• Organized and who follows a “problem-solving” and “results-oriented” approach.
• Excellent project and time management skills.
• English proficiency - above medium level, for technical documentation and cross-team collaboration.

What we offer

• Impactful work in a fun, inclusive and highly collaborative environment.
• Modern, open office spaces built for teamwork and creative work.
• Hybrid working model with flexibility baked in.
• Monthly benefit budget you can use your way.
• Extra paid vacation days based on total work experience.
• Continuous learning opportunities through ING Learning Centre, Udemy, Bookster, trainings and certifications.
• Internal mobility across ING worldwide, including short- and long-term international assignments.
• Opportunities to contribute to sustainability and CSR initiatives.

Job Application Safety Reminder

We’re seeing an increase in fraudulent job offers. To protect yourself, please:

• Apply only via official ING platforms. ING uses Workday as its recruitment system.
• Verify the sender’s email - it should only come from @ing.com or @myworkday.com.
• Know that ING will never request payments or banking details during the recruitment process.

How to Apply

Click “Apply” on our careers site and submit your application through Workday.

We’re excited to meet you!

Discover ING Bank Romania

ING believes in a world where everyone should have the freedom to grow in their own way - our global tagline, “do your thing”, reflects this belief. We empower our people with autonomy and expect them to use it to create meaningful impact for customers, colleagues and the organization.

Working here means being surrounded by energetic, ambitious and supportive colleagues. We embrace curiosity, thrive on change and continuously explore better ways of doing things.

With more than 30 years of presence in Romania, ING has been a pioneer in transforming the local banking landscape, driven by technology and innovation.

ING Bank Romania is the only bank in the local top 10 that has achieved its position through organic growth, without acquiring portfolios or other banks. We serve over 2.0 million clients across Retail, SME & Mid-Corporate and Wholesale Banking.

Join us!