> Markdown version of [/jobs/ext/2780516-cyber-threat-hunter](https://www.wearedevelopers.com/jobs/ext/2780516-cyber-threat-hunter). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Threat Hunter

- **Company:** Dormont Manufacturing Co
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cloud Computing Security, Intrusion Detection and Prevention, Mitre Att&ck, Cyber Threat Analysis
- **Published:** September 7, 2026
- **Apply:** https://www.buscojobs.com.es/cyber-threat-hunter-en-madrid-ID-370331430

## About the Role

Several years of hands-on experience in threat hunting activities.
Ability to translate threat intelligence into concrete, high-impact investigations.
Skill in identifying meaningful security gaps rather than chasing alerts or noise.
Capacity to think and reason like an adversary while acting as a defender.
Ability to deliver investigation outcomes that improve detection, controls or resilience.
Clear communication of complex threats to both technical and non-technical stakeholders.
Ability to work effectively in an environment with ambiguity, autonomy and high trust.
Extra Points
Experience or relevant certifications in cyber threat hunting, detection engineering or adversary simulation (e.g., GIAC, MITRE ATT&CK, cloud security or BAS-related certifications) are considered an advantage.

## Description

Cyber Threat Hunter At ING Hubs Spain we are looking for aCyber Threat Hunter .Your role and work environment are driven by curiosity and the motivation to stay ahead of cyber adversaries.As a Cyber Threat Hunter, you will proactively uncover advanced and hidden threats before they become incidents, think like an attacker, challenge assumptions, and help strengthen ING's resilience against evolving cyber risks.Team You will join ING'sGlobal Threat Management (GTM)team, a central capability within the CISO domain that focuses on intelligence-driven, proactive defense.The team works across geographies and disciplines to anticipate emerging threats, investigate advanced attack scenarios, and continuously improve ING's detection and defensive posture.Collaboration, communication, ownership and impact are core to how we work.Key ResponsibilitiesProactively conductintelligence-led threat huntingbased on emerging threats, adversary activity, and major external cyber incidents.Develop and testhypothesis-driven investigationsto identify unknown or evasive malicious activity.Analyze adversary behaviour across thefull attack chain , identifying detection and control gaps.Translate hunt outcomes intoactionable improvementsfor detection, prevention, and defensive architecture.Map findings toMITRE ATT&CKto clearly articulate threats, gaps, and priorities.Communicate investigation outcomes inclear, executive-ready reportsthat support risk-based decision making.Leverageautomation, AI-assisted analytics, and Breach & Attack Simulation (BAS)to continuously validate threat hypotheses, test adversary techniques and prioritize high-risk attack paths.QualificationsSeveral years of hands-on experience in threat hunting activities.Ability to translate threat intelligence into concrete, high-impact investigations.Skill in identifying meaningful security gaps rather than chasing alerts or noise.Capacity to think and reason like an adversary while acting as a defender.Ability to deliver investigation outcomes that improve detection, controls or resilience.Clear communication of complex threats to both technical and non-technical stakeholders.Ability to work effectively in an environment with ambiguity, autonomy and high trust.Extra PointsExperience or relevant certifications in cyber threat hunting, detection engineering or adversary simulation (e.g., GIAC, MITRE ATT&CK, cloud security or BAS-related certifications) are considered an advantage.Benefits Flexible remuneration model with benefits such as nursery, transport card, training aids...Transport allowance to help you get to the office.Pension plan available after one month of employment.Health insurance for you and your family (spouse/partner and children).Life insurance to protect what matters most.Restaurant card to cover lunch expenses.Electric mobility solutions, doctor, hairdresser, gym and The Good Service to help you with errands available in our offices.Flexible work model allowing you to decide which days you work at home and which you come to ING MAD.#J-*****-Ljbffr


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [AI is dead, long live AK](https://www.wearedevelopers.com/videos/1093-ai-is-dead-long-live-ak)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)