Threat Intelligence Expert
Do you want to use cyber threat intelligence to protect a global bank from real and evolving cyber threats?
As a Threat Intelligence Expert in Cyber Threat Management, you will turn large‑scale security and threat data into actionable intelligence. You will analyse and assess advanced cyber threats, threat actors, and attack scenarios to deliver actionable intelligence that helps ING anticipate, prioritise, and mitigate cyber risks.
The team
You will join ING’s Global Threat Management (GTM) team, a central capability within the CISO domain that focuses on intelligence‑driven, proactive defence.
The team works across geographies and disciplines to anticipate emerging threats, investigate advanced attack scenarios, and continuously improve ING’s detection and defensive posture. Collaboration, communication, ownership, and impact are core to how we work.
Roles and responsibilities
As a Threat Intelligence Expert in Cyber Threat Management, you will:
Collect, analyse, and assess internal and external threat intelligence to identify threats relevant to ING.
Develop and maintain tracking of threat actors, tactics, techniques, and procedures (TTPs) targeting the financial sector.
Analyse emerging threats, campaigns, and attack patterns, translating findings into clear threat assessments.
Map threats and scenarios to MITRE ATT&CK, kill chain, and threat models to articulate risk and exposure.
Apply automation and AI techniques to accelerate threat analysis, pattern discovery, and hypothesis testing.
Collaborate with cyber threat hunters and detection teams to operationalise analytics into real‑world security use cases.
Produce high‑quality intelligence products (threat assessments, scenario analyses, briefings) for technical and non‑technical stakeholders.
Provide clear, actionable recommendations to support prioritisation, mitigation, and decision‑making.
Contribute to executive‑ready reporting by articulating threat relevance, likelihood, and potential impact to ING.
Support situational awareness during significant cyber events or crisis situations.
Perform continuous horizon scanning to identify emerging trends, technologies, and threat developments.
Contribute to forward‑looking threat scenarios and forecasting to support strategic planning.
Assess how external developments may impact ING’s threat landscape over time.
Engage with internal stakeholders across GTM, CISO, IT, fraud, and business domains to understand intelligence requirements.
Act as a trusted subject‑matter expert, advising stakeholders on threat relevance and security implications.
Contribute to knowledge sharing and collaboration across teams to improve threat awareness and response.
Work independently on complex analyses while collaborating within the Threat Intelligence team.
Contribute to the improvement of threat intelligence processes, methodologies, and tradecraft.
Support the development and mentoring of less experienced analysts when required.
Ensure intelligence activities are aligned with ING policies, standards, and governance.
How to succeed
We hire smart people like you for your potential. Our biggest expectation is that you’ll stay curious. Keep learning. Take on responsibility. In return, we’ll back you to develop into an even more awesome version of yourself.
You will be successful in this role if you can:
Translate complex cyber threat problems into clear, data‑driven insights and recommendations that support decision‑making.
Apply structured analytical thinking to threat intelligence, using data, tooling, and frameworks in a practical and outcome‑focused way.
Work confidently with large, diverse, and imperfect data sets, drawing sound conclusions despite uncertainty.
Partner effectively with cyber security, detection, and risk teams to ensure intelligence leads to real operational and strategic impact.
Balance innovation with governance, ensuring quality, traceability, and explainability of intelligence outputs.
Communicate insights clearly and convincingly, adapting messages for technical experts and senior stakeholders.
Take ownership of your work, continuously improving tradecraft, methods, and processes.
Stay curious about the evolving threat landscape and actively invest in continuous learning and professional development.
Experienced with vulnerability and compliance scanning solutions with a solid understanding of remediation workflows.
Strong technical foundation across Windows/Linux servers and network infrastructure, including firewalls, proxies, and switching technologies.
Hands‑on scripting capability in Python, PowerShell or Bash to automate tasks, analyze data, or support operational security functions.
Background & qualifications
A degree in Computer Science, Cyber Security, Data Science, Engineering, or a related field, or equivalent practical experience.
Relevant certifications in cyber threat intelligence, cyber security, cloud platforms, data analytics, or security frameworks are an advantage.
Rewards and benefits
We want to make sure that it’s possible for you to strike the right balance between your career and your private life. Find out more about our employment conditions.
The benefits of working with us at ING include:
25-28 vacation days depending on contract
Pension scheme
13th month salary
8% Holiday payment
Hybrid working
Personal growth and challenging work with endless possibilities
An informal working environment with innovative colleagues
About us
Curious about how ING empowers people and businesses to move forward?
Discover what we do and what we can offer you.
Questions?
Contact the recruiter attached to the advertisement. Want to apply directly? Please upload your CV and motivation letter by clicking the ‘Apply’ button.