Senior Dynamic Offensive Testing Specialist

At ING Hubs Spain we are looking for a Senior Dynamic Offensive Testing Specialist 

Your role and work environment: 

We are looking for a talented and enthusiastic Senior Dynamic Offensive Testing Specialist to join our highly specialised and multicultural team within the Tribe Cyber Threat Management (CTM), part of the Global CISO Office. 

The responsibility of this team is to strengthen ING's resilience against current and emerging threats through a hands-on, threat-informed approach, and our way of working is based on global collaboration, rapid security assurance, responsible testing, knowledge sharing and the Orange Behaviours. 

In this role, you will coordinate and predominantly execute dynamic offensive testing in response to new and actively exploited threats. You will translate relevant attacker techniques, vulnerabilities and campaigns into safe, focused tests that determine whether ING systems, controls or processes could be vulnerable. 

This is not a traditional penetration testing or long-term red team role. We are looking for a hands-on offensive security specialist who can rapidly assess emerging threats, define proportionate test scenarios, execute them across complex environments and provide timely evidence to defensive teams and decision-makers. 

Your key responsibilities: 

As a Senior Dynamic Offensive Testing Specialist you will: 

• Coordinate the rapid assessment process from intelligence signal through scoping, approvals, execution and reporting. 

• Prioritise testing requests based on threat relevance, potential impact, exposure and urgency, ensuring the right technical and business stakeholders are involved. 

• Co-create clear hypotheses and realistic test cases with cyber threat intelligence teams, translating newly exploited vulnerabilities, attacker techniques, tooling and campaigns into focused scenarios. 

• Execute hands-on offensive tests across relevant on-premises, cloud, application, identity, endpoint and hybrid environments. 

• Safely reproduce or emulate essential elements of attack paths to determine whether exposure exists and whether preventive and detective controls perform as intended. 

• Develop and maintain reusable test procedures, scripts, tooling, lab environments and technical infrastructure that reduce the time from intelligence signal to reliable assessment. 

• Adapt public proofs of concept and attacker tooling responsibly, validating them before use in production-like environments. 

• Work with security operations, incident response, vulnerability management, engineering and other control owners to validate findings and agree immediate risk-reduction actions. 

• Conduct focused purple team activities, where useful, to improve detection and response capabilities. 

• Produce concise reports covering the threat, tested hypothesis, scope, evidence, limitations, potential impact and recommended actions. 

• Ensure confirmed exposure is clearly distinguished from assumptions and communicate urgent findings through the appropriate escalation channels. 

• Define proportionate rules of engagement, obtain required approvals, protect sensitive information, minimise operational impact and maintain clear stop conditions. 

What are we looking for? 

Want to know if this job is made for you? These are some of the qualities that we value the most for this role. And if the shoe fits… don’t hesitate to apply! 

• At least 5 years of hands-on experience in offensive security, penetration testing, red teaming, security research, vulnerability assessment or a comparable field. 

• Strong experience translating threat intelligence, vulnerability information or attacker techniques into focused and technically sound offensive test scenarios. 

• Broad experience testing complex enterprise environments, including identity systems, Active Directory, applications, endpoints, networks and major cloud platforms such as Azure, AWS or Google Cloud. 

• Practical development and scripting skills in languages such as Python, PowerShell, C#, Go or similar, with the ability to safely adapt proofs of concept and build reusable testing capabilities. 

• A strong understanding of operational safety, rules of engagement, evidence handling and risk management. 

• The ability to respond decisively to emerging threats, structure incomplete information and deliver high-quality assessments under time pressure. 

• A collaborative approach and the ability to communicate findings constructively with intelligence, red team, defensive and engineering teams. 

• A continuous-improvement mindset and a strong interest in attacker behaviour, emerging vulnerabilities and offensive security research. 

• Strong written and verbal communication skills and fluency in English. 

• Experience with threat intelligence, vulnerability management, purple teaming, detection engineering or incident response is a plus. 

What do we offer? 

The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details. 

Check out what is waiting for you! 

Be flexible my friend.

Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing. 

Restaurant card.

So that thinking about what to have for lunch doesn’t take up your time or your cravings. 

Our house will be your home.

In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more! 

Health insurance.

For you and all your family (spouse/partner and children). 

Life insurance.

We help you protect what matters most to you. 

Flexible remuneration.

In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids… 

Transport allowance.

It doesn't matter where you live, we’ll help you get to the office. 

Pension plan.

You can benefit from our pension plan after 1 month with us! 

Discover ING Hubs Spain 

We’re building something exciting—and we want you to be part of it.

ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain. 

What makes us different?

We have a tech-first mindset: We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology. 

We have global impact: You’ll be working on solutions that serve more than 34 million of customers in over 38 countries. 

We are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working. 

Sustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact. 

At ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning. 

We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you.

#LI-DNI