Vulnerability Intelligence Analyst

About the role

ING’s Global Threat Management (GTM) team is looking for a Vulnerability Intelligence Analyst to help drive proactive, intelligence‑based defence. Based in Spain, you will collaborate with Incident Response, IT and Development teams to identify, assess and remediate security weaknesses across our systems, applications and networks.

Key responsibilities

• Conduct regular vulnerability assessments using industry‑standard tools and methodologies.
• Monitor and collect vulnerability intelligence from security advisories, threat feeds, OSINT sources and dark‑web forums.
• Analyse vulnerability data, assess impact and produce detailed risk reports for stakeholders.
• Work with cross‑functional teams to prioritise remediation and provide guidance on best‑practice mitigation.
• Develop and maintain threat models to anticipate attack vectors in new and existing systems.
• Manage vulnerability intelligence platforms, ensuring tools are up‑to‑date with the latest signatures.
• Stay current with emerging vulnerability trends, attack techniques and security technologies.
• Ensure all activities comply with relevant industry standards, regulations and internal policies.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science or a related field.
• Minimum 2 years of experience in vulnerability management, threat intelligence or a related discipline.
• Strong analytical and problem‑solving abilities with the capacity to turn complex data into actionable insights.
• Proven teamwork and collaboration skills in a multi‑disciplinary environment.
• English proficiency at C1/B2 level.

Required skills

• Vulnerability assessment tools such as Nessus, Qualys or Rapid7.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain and NIST frameworks.
• Experience with OSINT collection and analysis.
• Understanding of network protocols, operating systems and security architectures.
• Familiarity with vulnerability intelligence platforms and threat‑modeling techniques.