Senior Incident Responder - CSIRT

Senior Incident Responder

When a major cyber incident hits ING, you are the person people turn to.

As a Senior Incident Responder within ING's Global CSIRT (Security Defence Centre), you lead the response to significant cyber incidents, coordinate stakeholders across business and technology teams, and help protect one of Europe's largest financial institutions. Beyond incident handling, you shape our response capabilities, mentor other responders, and work closely with national and international security communities to strengthen ING's resilience against emerging threats.

The Global CISOorganizationof INGis responsibleforassistingING’smanagement,businessand other tribes in providing customer-friendly services in a safe and secure way. Business leaders and CISO are jointly responsible for bank-wide security. CISO is mandated to drive required change in all domains,businessand IT. Within CISO, the Security DefenceCenter(SDC)is responsible forsecurity incident response and management as the Global CSIRTorganizationof ING.

The Team:

The senior security incident responderleads andassiststhe teamin beingpreparedfor major security incidents as part of an international team based in multiple countries,as one ofafew senior incident responders. As part of this task, the senior incident responder acts as the operational lead for the Incident Response squad on a rotational basis, coordinating day-to-day activities and ensuring effective handling of security incidents.

With deepexpertisein security incident response, the senior incident responder provides the squad with the knowledge and skills needed tofulfillits shared purpose: mitigating cyber and insider threats as quickly as possible to minimize business impact for ING every day.

Key Responsibilities

The senior incident responder is:

• Leading large and major security incidents within the organization, taking risk-based decisions tocontainand mitigate impact, andescalating where needed.

• Coordinatesthe daily Incident Response squad on anintermittentbasis, sharing this responsibility with other senior incident responders.

• Defines, reviews and updatesresponse plans and capabilities based on the current threat landscape to ensure responsereadiness.

• Contributes to Security Incident ResponseTesting, bothtechnical and tabletop assessments.

• Working independently andwithteams to mitigate security incidents.

• Expert in security response tooling, preferably highly skilledinmodern EDRand SOARsolutions.

• Working knowledge of modern AI-assisted response techniques, including practical experience with AI capabilities and agentic architectures to support faster analysis, automation, decision-making, and overall incident response effectiveness.

• Identifyingfunctional and non-functional requirements from stakeholders, aimedat providinghigh-quality response for ING’s application and infrastructure landscape.

• Mentors othermediorand junior incident responders.

• Supporting development of the vision and roadmap for the security detection and response services of CISO (which are aligned with the overall vision and roadmap for the department).

• Collaborates withsector peers, governmentbodiesand trusted security communities to improve response readiness and threat awareness.

• Maintaining relations within the global and local security teams.

• Reporting on progress of activities to the Head of SDC.

Audit & Compliance

• Work with the Head of SDC to ensure compliance of the security incident response services.

How to succeed
We hire smart people like you for your potential. Our biggest expectation is that you’ll stay curious. Keep learning. Take on responsibility. In return, we’ll back you to develop into an even more awesome version of yourself.

• Bachelor's degree incybersecurity, computerscienceoracomparable degree.

• 8-10 years’ professional experience within Incident Response or related Security Operations teams and relevant information securityexperience, ideallyinlarge,complexor regulated organisations.

• Subject matter expertin the area ofsecurity incident response.

• Excellent understanding of IT platforms, networking,cloudandapplicationlog data.

• Strong knowledge of current security technologies and emerging trendsinthe area ofsecurity detection or monitoring.

• Strong knowledge of cloud response capabilities.

• Good oral and written communication skills.

• Ability to simplify complexity and drive operational excellence.

• Ability to support yourself and other team members inprofessional and soft skills development.

• Good computer forensics skills (Windows, Linux,macOS,Cloud).

• Professional workingproficiencyin both Dutch and English.

• Demonstrable experience in a financial environment is a plus.

Rewards and benefits
We want to make sure that it’s possible for you to strike the right balance between your career and your private life. Find out more about our employment conditions.

The benefits of working with us at ING include:

• 25-28 vacation days depending on contract
• Pension scheme
• 13th month salary
• 8% Holiday payment
• Hybrid working
• Personal growth and challenging work with endless possibilities
• An informal working environment with innovative colleagues

About us
Curious about how ING empowers people and businesses to move forward?

Discover what we do and what we can offer you.

Questions?
Please visit our Frequently Asked Questions section to find some answers on questions you might have.

Contact the recruiter attached to the advertisement. Want to apply directly? Please upload your CV and motivation letter by clicking the ‘Apply’ button.