Senior Dynamic Offensive Testing Specialist

About the role

ING Hubs Spain is looking for a Senior Dynamic Offensive Testing Specialist to join the Tribe Cyber Threat Management (CTM) team, part of the Global CISO Office. The team strengthens ING's resilience against current and emerging threats through a hands-on, threat-informed approach. The role coordinates and mainly executes dynamic offensive testing in response to new and actively exploited threats, turning attacker techniques, vulnerabilities and campaigns into safe, focused tests that check whether ING systems, controls or processes are vulnerable. It is not a traditional penetration testing or long-term red team role.

Key responsibilities

• Coordinate the rapid assessment process from intelligence signal through scoping, approvals, execution and reporting.
• Prioritise testing requests by threat relevance, potential impact, exposure and urgency, involving the right technical and business stakeholders.
• Co-create hypotheses and test cases with cyber threat intelligence teams, turning newly exploited vulnerabilities, techniques, tooling and campaigns into focused scenarios.
• Execute hands-on offensive tests across on-premises, cloud, application, identity, endpoint and hybrid environments.
• Safely reproduce or emulate attack paths to check exposure and whether preventive and detective controls work.
• Develop and maintain reusable test procedures, scripts, tooling, lab environments and infrastructure.
• Adapt public proofs of concept and attacker tooling responsibly, validating them before use in production-like environments.
• Work with security operations, incident response, vulnerability management, engineering and other control owners to validate findings and agree risk-reduction actions.
• Run purple team activities where useful, and produce concise reports with threat, hypothesis, scope, evidence, limitations, impact and recommendations.
• Distinguish confirmed exposure from assumptions, communicate urgent findings through escalation channels, define rules of engagement, obtain approvals and protect sensitive information.

Required profile

• At least 5 years of hands-on experience in offensive security, penetration testing, red teaming, security research, vulnerability assessment or a comparable field.
• Strong experience translating threat intelligence and attacker techniques into focused test scenarios.
• Broad experience testing complex enterprise environments, including identity systems, Active Directory, applications, endpoints, networks and major cloud platforms such as Azure, AWS or Google Cloud.
• Ability to respond decisively to emerging threats and deliver high-quality assessments under time pressure.
• Collaborative approach and strong written and verbal communication skills, with fluency in English.
• Experience with threat intelligence, vulnerability management, purple teaming, detection engineering or incident response is a plus.

Required skills

• Development and scripting in Python, PowerShell, C# or Go, able to adapt proofs of concept and build reusable testing capabilities.
• Understanding of operational safety, rules of engagement, evidence handling and risk management.

What we offer

• Flexible working: choose which days you work from home and which you come to ING MAD.
• Restaurant card, health and life insurance for you and your family, and a pension plan after 1 month.
• Flexible remuneration model with additional services such as nursery, transport card and training aids.
• Transport allowance and an office with electric mobility solutions, doctor, hairdresser, gym and errand help.