IT Security Engineer

About Bank Mendes Gans (BMG), Part of ING 

Bank Mendes Gans, part of ING, is the world’s only bank dedicated exclusively to liquidity and information management solutions for Fortune 500 multinationals. We operate a bank-independent model, handling most of the world’s convertible currencies while cooperating with local banks across multiple countries and currencies.
Our innovative overlay solutions allow clients to implement sophisticated liquidity management strategies without changing their existing banking relationships.

Working at BMG Delivery

Customer satisfaction is our top priority. We specialize in international liquidity and information management, working in Agile DevOps squads that are fully responsible for their applications—from user story refinement to production deployment and incident support.
We value feedback, collaboration, and continuous learning. Our open culture, short communication lines, and hybrid work model make BMG an exciting and supportive place to grow your career.

Role Overview

As an IT Security Engineer, you will be part of the BMG IT Security team, providing expert security advice and guidance to DevOps teams. You will play a critical role in ensuring our IT environment remains secure, compliant, and aligned with business objectives.

Key Responsibilities

• Provide IT security advisory and guidance to development and IT operations teams.

• Analyse IT risk and security requirements, defining specifications for testing and reporting.

• Coordinate and advise on penetration testing activities and remediation.

• Guide teams on static and dynamic code analysis (SDLC) and resolve identified issues.

• Ensure CI/CD pipelines and associated tooling are secured.

• Communicate with stakeholders to understand needs and design security solutions accordingly.

Requirements

Experience & Skills

• 3–4+ years of experience in an IT security role (preferably in a software company or financial institution).

• Strong coding skills, or proven experience in secure code review and remediation.

• Solid understanding of network and web protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS, etc.).

• In-depth knowledge of common security vulnerabilities and remediation strategies (e.g., OWASP Top 10).

• Familiarity with security frameworks such as ISO2700x, NIST, ISF, CIS.

• Nice to have: Security certifications (e.g., ISC2 SSCP/CISSP, CompTIA Security+, EC-Council CEH).

• Nice to have: Experience with secure code tools like Checkmarx or similar.

Core Competencies

• Hands-on, proactive problem-solving approach.

• Excellent communication skills for both technical and non-technical audiences.

• Strong ownership, urgency, and drive to deliver results.

• Collaborative, customer-focused mindset.

• Ability to inspire confidence during periods of change.

• Analytical thinker with strong problem-solving skills.

• Resilient under pressure and adaptable in a fast-changing environment.

• Commitment to continuous skill development.

What We Offer

• A dynamic, international working environment.

• Hybrid work schedule: 2 days in the office, 3 days from home.

• Opportunities for professional growth, certifications, and continuous learning.

• A culture that values feedback, collaboration, and innovation.