ph3Cyber Threat Hunter /h3 pAt ING Hubs Spain we are looking for a bCyber Threat Hunter /b. /p pYour role and work environment are driven by curiosity and the motivation to stay ahead of cyber adversaries. As a Cyber Threat Hunter, you will proactively uncover advanced and hidden threats before they become incidents, think like an attacker, challenge assumptions, and help strengthen ING's resilience against evolving cyber risks. /p h3Team /h3 pYou will join ING's bGlobal Threat Management (GTM) /b team, a central capability within the CISO domain that focuses on intelligence-driven, proactive defense. The team works across geographies and disciplines to anticipate emerging threats, investigate advanced attack scenarios, and continuously improve ING's detection and defensive posture. Collaboration, communication, ownership and impact are core to how we work. /p h3Key Responsibilities /h3 ul liProactively conduct bintelligence-led threat hunting /b based on emerging threats, adversary activity, and major external cyber incidents. /li liDevelop and test bhypothesis-driven investigations /b to identify unknown or evasive malicious activity. /li liAnalyze adversary behaviour across the bfull attack chain /b, identifying detection and control gaps. /li liTranslate hunt outcomes into bactionable improvements /b for detection, prevention, and defensive architecture. /li liMap findings to bMITRE ATTCK /b to clearly articulate threats, gaps, and priorities. /li liCommunicate investigation outcomes in bclear, executive-ready reports /b that support risk-based decision making. /li liLeverage bautomation, AI-assisted analytics, and Breach Attack Simulation (BAS)



/b to continuously validate threat hypotheses, test adversary techniques and prioritize high-risk attack paths. /li /ul h3Qualifications /h3 ul liSeveral years of hands-on experience in threat hunting activities. /li liAbility to translate threat intelligence into concrete, high-impact investigations. /li liSkill in identifying meaningful security gaps rather than chasing alerts or noise. /li liCapacity to think and reason like an adversary while acting as a defender. /li liAbility to deliver investigation outcomes that improve detection, controls or resilience. /li liClear communication of complex threats to both technical and non-technical stakeholders. /li liAbility to work effectively in an environment with ambiguity, autonomy and high trust. /li /ul h3Extra Points /h3 ul liExperience or relevant certifications in cyber threat hunting, detection engineering or adversary simulation (e.g., GIAC, MITRE ATTCK, cloud security or BAS-related certifications) are considered an advantage. /li /ul h3Benefits /h3 pFlexible remuneration model with benefits such as nursery, transport card, training aids… /p pTransport allowance to help you get to the office. /p pPension plan available after one month of employment. /p pHealth insurance for you and your family (spouse/partner and children). /p pLife insurance to protect what matters most. /p pRestaurant card to cover lunch expenses. /p pElectric mobility solutions, doctor, hairdresser, gym and The Good Service to help you with errands available in our offices. /p pFlexible work model allowing you to decide which days you work at home and which you come to ING MAD. /p /p #J-18808-Ljbffr

📌 Cyber Threat Hunter (Madrid)
🏢 Dormont Manufacturing
📍 Madrid