{"id":3879403,"url":"https://alion.io/job/ing-group-threat-engineer","title":"Threat Engineer","company":{"id":3744,"name":"ING Group","domain":"ing.com","url":"https://alion.io/company/ing","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":108,"ghost_share":0.019,"stale_share":0.722,"repost_share":0.065,"time_to_fill_p50_days":29,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Databricks","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-11-06T17:40:41Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T13:54:52Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"At ING Hubs Spain we are looking for a Threat Engineer in Threat Management\nYour role and work environment:\nWe are looking for a talented and enthusiastic Threat Engineer to join our Global Threat Management Team within the Cyber Threat Management area.\nThe responsibility of this team is to transform threat intelligence and security telemetry into actionable insights that strengthen detection, prioritisation and cybersecurity decision-making, and our way of working is based on data-driven analysis, cloud engineering, automation and close collaboration with threat intelligence and cybersecurity specialists.\nIn this role, you will combine cybersecurity expertise with software engineering, cloud infrastructure and data analysis. You will design and operate automations and integrations that help ING identify, investigate and respond to cyber threats more effectively across a complex global environment.\nYour key responsibilities:\nAs a Threat Engineer you will:\nPositively contribute to the detection, prioritisation and investigation of cyber threats by designing and implementing scalable automations.\nCo-create intelligence-driven security solutions with threat intelligence specialists, cybersecurity experts and architects.\nEnsure large-scale security telemetry and threat intelligence data are transformed into actionable insights for operational teams and executive decision-making.\nAutomate and accelerate threat analysis using standard and custom-built tooling, primarily developed in Python.\nDeploy and operate infrastructure and automations on cloud and data platforms such as Azure, Google Cloud Platform and Databricks, ensuring scalability, reliability and governance.\nDesign integrations across data sources, security tools and services to improve intelligence-driven detection and analysis.\nLeverage AI, GenAI and automation selectively and securely to streamline workflows, enrich threat intelligence processes and deliver measurable operational value.\nCreate clear technical documentation, diagrams and visualisations to communicate solutions, insights and recommendations to technical and non-technical stakeholders.\nMaintain, troubleshoot and resolve deployment, installation, configuration and integration issues across cloud infrastructure, security tooling and custom-built solutions.\nBuild and maintain CI/CD pipelines and use version-control practices to support reliable and repeatable delivery.\nWhat are we looking for?\nWant to know if this job is made for you? These are some of the qualities that we value the most for this role. And if the shoe fits… don’t hesitate to apply!\nExperience translating complex cyber threat challenges into robust, data-driven technical solutions.\nStrong Python development skills for analysis, automation and custom tooling, with practical experience using Jupyter Notebooks.\nHands-on experience deploying solutions across cloud environments such as Azure and Google Cloud Platform, using Terraform or comparable Infrastructure as Code solutions.\nExperience using GenAI or large language model capabilities selectively, securely and with a clear focus on measurable operational value.\nSolid understanding of cloud platforms, networking, system administration, infrastructure architecture and the operating model of CISO organisations in medium-to-large enterprises.\nStrong hands-on experience diagnosing and resolving deployment, installation and integration issues across cloud environments, infrastructure components and custom-built tools.\nAbility to design end-to-end solutions and translate complex system landscapes into clear, implementable designs.\nExperience building and maintaining CI/CD pipelines and working with version-control systems such as Git.\nFamiliarity with malware behaviour, threat actors and adversary tactics, techniques and procedures.\nCuriosity, strong problem-solving skills and the ability to collaborate proactively and communicate clearly with technical and non-technical stakeholders.\nNice to have\nExperience with threat intelligence platforms, data feeds and standard threat intelligence terminology.\nExperience with Databricks, data engineering or large-scale data-processing platforms.\nExperience building AI or GenAI solutions using LLMs and automation frameworks.\nExperience with security automation and orchestration platforms.\nPractical understanding of threat-modelling frameworks such as Cyber Kill Chain and MITRE ATT&CK, and their application to detection and analysis.\nWhat do we offer?\nThe time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details.\nCheck out what is waiting for you!\nBe flexible my friend. Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.\nRestaurant card. So that thinking about what to have for lunch doesn’t take up your time or your cravings.\nOur house will be your home. In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!\nHealth insurance. For you and all your family (spouse/partner and children).\nLife insurance. We help you protect what matters most to you.\nFlexible remuneration. In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids…\nTransport allowance. It doesn't matter where you live, we’ll help you get to the office.\nPension plan. You can benefit from our pension plan after 1 month with us!\nDiscover ING Hubs Spain\nWe’re building something exciting-and we want you to be part of it.\nING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.\nWhat makes us different?\nWe have a tech-first mindset: We’re not just a bank-we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology.\nWe have global impact: You’ll be working on solutions that serve more than 34 million of customers in over 38 countries.\nWe are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working.\nSustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.\nAt ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning.\nWe’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose-we’re looking forward to meeting you.\n#LI-DNI","description_format":"text","description_chars":7562,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Health insurance","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Information Security","Investment Banking & M&A Advisory","Business Process Outsourcing (BPO)"],"lifecycle":[{"event":"open","at":"2026-11-06T17:40:41Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:6","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/ing-group-threat-engineer","json_url":"https://alion.io/job/ing-group-threat-engineer.json","meta":{"generated_at":"2026-11-07T15:40:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21400,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3744},"rest":"https://alion.io/mcp/rest/get_company?id=3744"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fing-group-threat-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fing-group-threat-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fing-group-threat-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ing-group-threat-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fing-group-threat-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3879403}},{"tool":"search_jobs","arguments":{"company":"ing.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3879403},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}