Company Description

Ryanair Labs are currently recruiting for an Information Security Engineer – Senior Penetration Tester to join Europe’s Largest Airline Group
This is a very exciting time to join Ryanair as we look to expand our operation to 800 aircraft and 300 million guests within the next 10 years.
Ryanair Labs is the technology brand of Ryanair. Labs is a state of-the-art digital & IT innovation hub creating Europe's Leading Travel Experience for our customers.

Job Description

About the role

A hands-on, individual-contributor role in a lean airline security team. You find exploitable weaknesses before attackers do across web and mobile applications, APIs, internal networks, identity and multicloud (AWS, GCP, Azure) including the AI-enabled systems we build and buy. You don't stop at the report: you prove impact, drive fixes with owners, re-test, and turn what you learn into detection and hardening requirements.
How you'll work: scope → test → prove → fix → verify
• Scope. Maintain an attack-surface inventory (external, internal, cloud, SaaS,



AI systems); threat-model with owners; define rules of engagement and safety constraints, especially around operational systems.
• Test. Manual-first testing following recognised methodologies (OWASP WSTG/ASVS/MASVS, PTES, MITRE ATT&CK;), with automation for breadth.
• Prove. Demonstrate real impact with safe proof-of-concept exploits and attack chains; rate with CVSS plus business context. Scanner output is not a finding.
• Fix. Write remediation owners can act on; pair with engineers; convert findings into detection requirements and control improvements for the detection team.
• Verify. Re-test, track closure, measure time-to-remediate and recurrence.

What you'll do
• Test passenger-facing and internal web, mobile and API applications.
• Test internal/external networks, Active Directory / Entra ID and identity attack paths.
• Cloud penetration testing across AWS, GCP and Azure: IAM privilege escalation, misconfigur

📌 Information Security Engineer – Senior Penetration Tester (Madrid)
🏢 Ryanair Group Holdings
📍 Madrid