Senior Phishing Simulation Specialist

Job title: Senior Phishing Simulation Specialist

At ING Hubs Spain we are looking for a Senior Social Engineering Simulation Specialist

Your role and work environment:

We are looking for a talented and enthusiastic Senior Social Engineering Simulation Specialist to join our highly specialised, multicultural and technical team within the Tribe Cyber Threat Management (CTM), part of the Global CISO Office.

The responsibility of this team is to use threat intelligence and adversarial testing to challenge ING's resilience against current and emerging threats, and our way of working is based on global collaboration, hands-on technical execution, knowledge sharing and the Orange Behaviours.

In this role, you will manage and execute ING’s global social engineering testing programme. You will create credible pretexts, build and deliver technically realistic attack scenarios, and assess how people, processes and controls respond across email and other relevant channels.

This is not a standard security awareness or campaign administration role. We are looking for a hands-on security specialist who is comfortable working close to the underlying technology and combining social engineering judgement with Python-based automation, Microsoft Attack Simulation Training, email infrastructure, web content, data handling and technical troubleshooting.

Your key responsibilities:

As a Senior Social Engineering Simulation Specialist you will:

• Manage the planning, governance, technical delivery and continuous improvement of the global social engineering testing programme, maintaining a risk-based roadmap and defining clear rules of engagement, safeguards and measurable outcomes.

• Design and execute realistic social engineering operations by researching targets and business context, developing credible pretexts and reproducing relevant attacker tradecraft through email and, where approved, other channels.

• Engineer and operate the phishing capability using Microsoft Attack Simulation Training, custom Python scripts and supporting components, including payloads, landing pages, authentication, API integrations, targeting logic, telemetry and reporting workflows.

• Co-create threat-informed attack scenarios with cyber threat intelligence, red team and fraud specialists, converting relevant techniques, lures, infrastructure patterns and attacker behaviours into safe and technically credible tests.

• Build and maintain reusable technical assets, including templates, web content, scripts, test infrastructure, automation, version-controlled code and technical documentation.

• Assess human, process and technical controls by analysing delivery, interaction, reporting and control telemetry, validating anomalies and distinguishing genuine exposure from artefacts caused by automated security controls.

• Turn evidence into defensive improvements by producing concise reports and working with control owners to improve detection, reporting mechanisms, mail and browser controls, procedures and response playbooks.

• Coordinate stakeholders across countries and functions to agree scope, timing, approvals, escalation routes and stop conditions, applying privacy, legal, labour, cultural, accessibility and employee well-being requirements.

What are we looking for?

Want to know if this job is made for you? These are some of the qualities that we value the most for this role. And if the shoe fits… don’t hesitate to apply!

• At least 5 years of relevant hands-on experience in social engineering testing, offensive security, red teaming, security engineering, phishing operations or a comparable technical security field.

• Demonstrable experience designing and executing realistic social engineering scenarios, including pretext development, payload or landing-page construction, operational delivery and evidence analysis.

• Strong Python scripting skills and practical experience building or maintaining automation and API integrations, including source control, structured data and technical debugging.

• Hands-on experience with Microsoft Attack Simulation Training or comparable enterprise tooling, including the ability to extend platform capabilities beyond standard templates and workflows.

• A sound understanding of Microsoft 365 and email technologies, including Exchange Online, Microsoft Graph, mail routing, SPF, DKIM, DMARC, secure email gateways, URL rewriting, browser controls and user-reporting mechanisms.

• Experience working with HTML and web content, authentication concepts, APIs and telemetry. Familiarity with PowerShell, cloud services or lightweight infrastructure management is a plus.

• The ability to interpret technical and behavioural evidence, identify false positives caused by automated security controls and translate findings into practical defensive recommendations.

• A strong understanding of operational security, rules of engagement, privacy, evidence handling and the ethical boundaries required when testing employees in a multinational organisation.

• Strong ownership from initial idea through technical build, execution, troubleshooting, analysis and remediation.

• A collaborative approach focused on sharing code, methods and lessons learned while strengthening resilience without creating a culture of blame.

• A continuous-improvement mindset and strong interest in evolving social engineering tradecraft, Microsoft 365 changes and defensive controls.

• Strong written and verbal communication skills, the ability to work effectively in a highly technical team and fluency in English.

What do we offer?

The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details.

Check out what is waiting for you!

Be flexible my friend. Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.

Restaurant card. So that thinking about what to have for lunch doesn’t take up your time or your cravings.

Our house will be your home. In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!

Health insurance. For you and all your family (spouse/partner and children).

Life insurance. We help you protect what matters most to you.

Flexible remuneration. In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids…

Transport allowance. It doesn't matter where you live, we’ll help you get to the office.

Pension plan. You can benefit from our pension plan after 1 month with us!

Discover ING Hubs Spain

We’re building something exciting—and we want you to be part of it.

ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.

What makes us different?

We have a tech-first mindset: We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology.

We have global impact: You’ll be working on solutions that serve more than 34 million of customers in over 38 countries.

We are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working.

Sustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.

At ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning.

We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you.