Senior Dynamic Offensive Testing Specialist

About the Company

Responsibilities

• ● At ING Hubs Spain we are looking for a Senior Dynamic Offensive Testing Specialist
• ● Your role and work environment:
• ● The responsibility of this team is to strengthen ING's resilience against current and emerging threats through a hands-on, threat-informed approach, and our way of working is based on global collaboration, rapid security assurance, responsible testing, knowledge sharing and the Orange Behaviours.
• ● In this role, you will coordinate and predominantly execute dynamic offensive testing in response to new and actively exploited threats. You will translate relevant attacker techniques, vulnerabilities and campaigns into safe, focused tests that determine whether ING systems, controls or processes could be vulnerable.
• ● This is not a traditional penetration testing or long-term red team role. We are looking for a hands-on offensive security specialist who can rapidly assess emerging threats, define proportionate test scenarios, execute them across complex environments and provide timely evidence to defensive teams and decision-makers.
• ● Your key responsibilities:
• ● As a Senior Dynamic Offensive Testing Specialist you will:
• ● Coordinate the rapid assessment process from intelligence signal through scoping, approvals, execution and reporting.
• ● Prioritise testing requests based on threat relevance, potential impact, exposure and urgency, ensuring the right technical and business stakeholders are involved.
• ● Co-create clear hypotheses and realistic test cases with cyber threat intelligence teams, translating newly exploited vulnerabilities, attacker techniques, tooling and campaigns into focused scenarios.
• ● Execute hands-on offensive tests across relevant on-premises, cloud, application, identity, endpoint and hybrid environments.
• ● Safely reproduce or emulate essential elements of attack paths to determine whether exposure exists and whether preventive and detective controls perform as intended.
• ● Develop and maintain reusable test procedures, scripts, tooling, lab environments and technical infrastructure that reduce the time from intelligence signal to reliable assessment.
• ● Adapt public proofs of concept and attacker tooling responsibly, validating them before use in production-like environments.
• ● Work with security operations, incident response, vulnerability management, engineering and other control owners to validate findings and agree immediate risk-reduction actions.
• ● Conduct focused purple team activities, where useful, to improve detection and response capabilities.
• ● Produce concise reports covering the threat, tested hypothesis, scope, evidence, limitations, potential impact and recommended actions.
• ● Ensure confirmed exposure is clearly distinguished from assumptions and communicate urgent findings through the appropriate escalation channels.
• ● Define proportionate rules of engagement, obtain required approvals, protect sensitive information, minimise operational impact and maintain clear stop conditions.