At ING Hubs Spain we are looking for a
Threat Intelligence Expert
Your role and work environment:
Do you want to use cyber threat intelligence to protect a global bank from real and evolving cyber threats?
As a Threat Intelligence Expert in Cyber Threat Management, you will turn large?scale security and threat data into actionable intelligence. You will analyse and assess advanced cyber threats, threat actors, and attack scenarios to deliver actionable intelligence that helps ING anticipate, prioritise, and mitigate cyber risks.
The team
You will join ING's
Integral Threat Management (GTM)
team, a central capability within the CISO domain that focuses on intelligence?driven, proactive defence.
The team works across geographies and disciplines to anticipate emerging threats, investigate advanced attack scenarios, and continuously improve ING's detection and defensive posture. Collaboration, communication, ownership, and impact are core to how we work.
Your key responsibilities:
As a Threat Intelligence Expert, you will:
Collect, analyse, and assess
internal and external threat intelligence
to identify threats relevant to ING.
Develop and maintain tracking
of threat actors, tactics, techniques, and procedures (TTPs)
targeting the financial sector.
Analyse emerging threats, campaigns, and attack patterns, translating findings into
clear threat assessments
.
Map threats and scenarios to
MITRE ATT&CK;, kill chain, and threat models
to articulate risk and exposure.
Apply
automation and AI techniques
to accelerate threat analysis, pattern discovery, and hypothesis testing.
Collaborate with cyber threat hunters and detection teams to
operationalise analytics into real?world security use cases.
Produce




high?quality intelligence products
(threat assessments, scenario analyses, briefings) for technical and non?technical stakeholders.
Provide
clear, actionable recommendations
to support prioritisation, mitigation, and decision?making.
Contribute to
executive?ready reporting
by articulating threat relevance, likelihood, and potential impact to ING.
Support situational awareness during
significant cyber events or crisis situations
.
Perform continuous
horizon scanning
to identify emerging trends, technologies, and threat developments.
Contribute to
forward?looking threat scenarios and forecasting
to support strategic planning.
Assess how external developments may impact ING's threat landscape over time.
Engage with internal stakeholders across
GTM, CISO, IT, fraud, and business domains
to understand intelligence requirements.
Act as a trusted
subject?matter expert
, advising stakeholders on threat relevance and security implications.
Contribute to knowledge sharing and collaboration across teams to improve threat awareness and response.
Work independently on complex analyses while collaborating within the Threat Intelligence team.
Contribute to the improvement of
threat intelligence processes, methodologies, and tradecraft
.




Support the development and mentoring of less experienced analysts when required.
Ensure intelligence activities are aligned with ING policies, standards, and governance.
What are we looking for?
Want to know if this job is the right fit for you? These are some of the qualities we value most for this role. And if the shoe fits... don't hesitate to apply
We are looking for you, if you have:
A degree in
Computer Science, Cyber Security, Data Science, Engineering
, or a related field, or equivalent practical experience.
English-C1/B2
Translate
complex cyber threat problems
into
clear, data?driven insights and recommendations
that support decision?making.
Apply
structured analytical thinking
to threat intelligence, using data, tooling, and frameworks in a
practical and outcome?focused way
.
Work confidently with
large, diverse, and imperfect data sets
, drawing sound conclusions despite uncertainty.
Partner effectively with
cyber security, detection, and risk teams
to ensure intelligence leads to
real operational and strategic impact
.
Balance
innovation with governance
, ensuring quality, traceability, and explainability of intelligence outputs.
Communicate insights
clearly and convincingly
, adapting messages for technical experts and senior stakeholders.
Take ownership of your work, continuously
improving tradecraft, methods, and processes
.
Stay curious about the evolving threat landscape and actively invest in
continuous learning and professional development
.
Experienced with vulnerability and compliance scanning solutions with a solid understanding of remediation workflows.
Strong technical foundation across

📌 Threat Intelligence Expert (Madrid)
🏢 Ing
📍 Madrid