Cyber Threat Hunter

About the Position

Cyber Threat Hunter

At ING Hubs Spain, we are looking for a Senior Cyber Threat Hunter to join our team. Are you driven by curiosity and motivated to stay ahead of cyber adversaries? As a Senior Cyber Threat Hunter, you will proactively uncover advanced and hidden threats before they become incidents. You will think like an attacker, challenge assumptions, and help strengthen ING’s resilience against evolving cyber risks.

Responsibilities

As a Senior Cyber Threat Hunter, you will:

• Proactively conduct intelligence-led threat hunting and emulation based on emerging threats, adversary activity, and major external cyber incidents.
• Develop and test hypothesis-driven investigations to identify unknown or evasive malicious activity.
• Analyse adversary behaviour across the full attack chain, identifying detection and control gaps.
• Translate hunt outcomes into actionable improvements for detection, prevention, and defensive architecture.
• Map findings to MITRE ATT&CK to clearly articulate threats, gaps, and priorities.
• Communicate investigation outcomes in clear, executive-ready reports that support risk-based decision-making.
• Leverage automation, AI-assisted analytics, and Breach & Attack Simulation (BAS) to continuously validate threat hypotheses, test adversary techniques, and prioritise high-risk attack paths.

Requirements

• Several years of hands-on experience in hypothesis-based threat hunting activities, purple teaming, or security research.
• Experience with threat hunting methodologies, such as TaHiTi, PEAK, or others.
• Proven experience in large enterprise environments, with technologies such as CI/CD, multi-cloud, and containers.
• Ability to translate threat intelligence into concrete, high-impact investigations.
• Skill in identifying and validating meaningful security gaps rather than chasing alerts or noise.
• Capacity to think and reason like an adversary while emulating attack scenarios.
• Ability to deliver investigation outcomes that improve detection, controls, or resilience.
• Clear communication of complex threats to both technical and non-technical stakeholders.
• Ability to work effectively in an environment with ambiguity, autonomy, and high trust.

Nice to Have

• Experience or relevant certifications in cyber threat hunting, detection engineering, or adversary simulation (e.g., GIAC, MITRE ATT&CK, cloud security, or BAS-related certifications) are considered an advantage.

We Offer

• Flexible work model: Determine your work schedule with a balance between home and office.
• Restaurant card to enjoy lunch without hassle.
• Comprehensive health and life insurance for you and your family.
• Flexible remuneration model with additional benefits like nursery, transport card, and training aids.
• Transport allowance to help you commute to the office.
• Pension plan available after one month of employment.

About the Company

ING Hubs Spain is a new member of ING Hubs, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye, and Spain.

We have a tech-first mindset, a global impact, and an agile way of working. Sustainability is at the heart of what we do, and we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive.

We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose-we’re looking forward to meeting you.