Threat Engineer (Cybersecurity)

Location: Madrid, Spain; hybrid work with days at home and at the ING MAD office

Company

hirify.global Spain is a global technology and operations hub within ING, developing scalable and secure solutions for frictionless banking across more than 38 countries.

What you will do

• Design and implement scalable automations for cyber threat detection, prioritisation and investigation.
• Build intelligence-driven security solutions with threat intelligence specialists, cybersecurity experts and architects.
• Transform large-scale security telemetry and threat intelligence data into actionable insights for operational teams and executive decision-making.
• Develop Python tooling, integrations and data workflows across security tools, cloud platforms and services.
• Deploy and operate automations and infrastructure on Azure, Google Cloud Platform and Databricks, ensuring scalability, reliability and governance.
• Maintain documentation, visualisations, CI/CD pipelines and integrations while troubleshooting deployment and configuration issues.

Requirements

• Experience translating complex cyber threat challenges into robust, data-driven technical solutions.
• Strong Python development skills for analysis, automation and custom tooling, including practical experience with Jupyter Notebooks.
• Hands-on experience deploying solutions in cloud environments such as Azure and Google Cloud Platform, using Terraform or comparable Infrastructure as Code solutions.
• Experience using GenAI or large language model capabilities selectively and securely with measurable operational value.
• Solid understanding of cloud platforms, networking, system administration, infrastructure architecture and CISO operating models in medium-to-large enterprises.
• Strong hands-on experience diagnosing and resolving deployment, installation and integration issues across cloud environments, infrastructure components and custom-built tools.
• Ability to design end-to-end solutions and translate complex system landscapes into clear, implementable designs.
• Experience building and maintaining CI/CD pipelines and using version-control systems such as Git.
• Familiarity with malware behaviour, threat actors, adversary tactics, techniques and procedures, plus strong problem-solving, collaboration and communication skills.

Nice to have

• Experience with threat intelligence platforms, data feeds and standard threat intelligence terminology.
• Experience with Databricks, data engineering or large-scale data-processing platforms.
• Experience building AI or GenAI solutions using LLMs and automation frameworks.
• Experience with security automation and orchestration platforms.
• Practical understanding of Cyber Kill Chain and MITRE ATT&CK threat-modelling frameworks and their application to detection and analysis.

Culture & Benefits

• Hybrid flexibility: determine together which days are worked from home and which from the ING MAD office.
• Health insurance for the employee and family, life insurance and access to a pension plan after one month.
• Restaurant card, transport allowance and flexible remuneration covering services such as nursery, transport and training.
• Office facilities include electric mobility solutions, a doctor, hairdresser, gym and personal-services support.
• Tech-first, agile and collaborative environment focused on global impact, sustainability, inclusion and continuous learning.