7 дней назад
Senior Dynamic Offensive Testing Specialist (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Dynamic Offensive Testing Specialist (Cybersecurity): Executing threat-informed offensive tests across on-premises, cloud, application, identity, endpoint, and hybrid environments with an accent on emerging threats, safe attack emulation, and rapid security assessment. Focus on translating attacker techniques and vulnerabilities into test scenarios, adapting proofs of concept, validating security controls, and delivering actionable evidence to defensive and engineering teams.
Location: Madrid, Spain; hybrid work with regular attendance at ING MAD
Company
Spain is a global technology and operations hub within ING, delivering scalable, secure solutions for banking customers across more than 38 countries.
What you will do
- Coordinate rapid offensive-testing assessments from threat-intelligence signals through scoping, approvals, execution, and reporting.
- Translate emerging vulnerabilities, attacker techniques, tooling, and campaigns into focused hypotheses and realistic test scenarios.
- Execute safe offensive tests across on-premises, cloud, application, identity, endpoint, network, and hybrid environments.
- Develop reusable testing procedures, scripts, tooling, lab environments, and technical infrastructure.
- Work with security operations, incident response, vulnerability management, engineering, and control owners to validate findings and reduce risk.
- Conduct focused purple-team activities and produce concise reports with evidence, impact, limitations, and recommended actions.
Requirements
- At least 5 years of hands-on experience in offensive security, penetration testing, red teaming, security research, vulnerability assessment, or a comparable field.
- Experience testing complex enterprise environments, including Active Directory, identity systems, applications, endpoints, networks, and major cloud platforms such as Azure, AWS, or Google Cloud.
- Practical scripting and development skills in Python, PowerShell, C#, Go, or similar technologies.
- Strong understanding of operational safety, rules of engagement, evidence handling, risk management, and responsible testing.
- Ability to assess emerging threats under time pressure and collaborate with intelligence, red-team, defensive, and engineering teams.
- Fluent English required.
Nice to have
- Experience with threat intelligence, vulnerability management, purple teaming, detection engineering, or incident response.
Culture & Benefits
- Flexible hybrid working model with jointly determined office and home-working days.
- Health insurance for employees and family members, plus life insurance.
- Restaurant card, transport allowance, flexible remuneration, and pension plan eligibility after one month.
- Access to office services including electric mobility solutions, a doctor, hairdresser, gym, and personal-assistance services.
- International, multicultural, agile, and collaborative environment focused on continuous learning and inclusion.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →