Senior IT Security Engineer

About the role

ING Hubs Romania, which provides software development, data management, risk and compliance, audit and retail operations services to 24 ING units worldwide, is hiring a Senior IT Security Engineer. You will help strengthen ING's security posture by guiding product teams in secure design, threat mitigation, vulnerability remediation, penetration test readiness and regulatory compliance. You will join a new multinational Security Engineering Services team (Romania and Netherlands) acting as a Centre of Excellence covering infrastructure and network security, DevSecOps and application security, and data and analytics and AI/ML security.

Key responsibilities

• Guide teams so they design and build secure, resilient and compliant systems by default
• Conduct security assessments (infrastructure, application, data, ML/AI) and support remediation
• Translate security standards into practical, developer-friendly best practices
• Partner with software engineers, SREs, data engineers and platform teams to embed security throughout the lifecycle
• Act as a subject matter expert, giving proactive guidance, coaching and support
• Assess emerging technologies, engineering patterns and security threats and share clear, actionable guidance
• Support risk assessments, threat modelling, blue/red teaming, security testing and design reviews
• Contribute to security communities of practice and to automating security engineering processes

Required profile

• Solid security engineering foundation, with one clearly defined area of specialization
• Track record in security assessments, reporting and supporting remediation
• Ability to explain complex security topics clearly and pragmatically
• Strong problem-solving, analytical thinking and stakeholder collaboration skills
• Entrepreneurial mindset to help build a new team

Required skills

• Azure pipelines, Kubernetes, Linux and Windows virtual machines
• Databases such as Oracle, MSSQL and Cassandra
• Application and API development
• General IT security concepts: secure design, threat modelling, vulnerability management
• Preferred: Google Professional Machine Learning Engineer, AWS Machine Learning Specialty, Microsoft Azure AI Engineer Associate, ISACA CDPSE (Data Privacy)
• Preferred but not mandatory: exposure to MITRE ATLAS and adversarial ML tools