Company Description Ryanair Labs are currently recruiting two Information Security Architect to join Europe's Largest Airline Group Ryanair Labs is the technology brand of Ryanair. Labs is a state-of-the-art digital & IT innovation hub creating Europe's Leading Travel Experience for our customers. A senior, self-directed architect in a lean airline security team. You work without day-to-day supervision: you find where the team spends effort on repeatable work, decide what to automate, build it and measure the result. You own the security architecture for the AI systems we build and buy, and you take a lead role in strategic security initiatives across on-prem and multicloud (AWS, GCP, Azure). Independently map how the security team works detection, incident response, vulnerability management, pentesting, IAM, compliance and spot repeatable manual work, weak controls and gaps; Automation and architecture patterns with explicit trade-offs: data boundaries, identity for humans and agents, least-privilege tool access, guardrails, human-in-the-loop for decisions. Ship it yourself or alongside engineers: agentic workflows, integrations, IaC and policy-as-code, proofs of concept. measure hours removed, error rates and coverage. update patterns as the AI and threat landscape shifts. Build agentic and scripted automation for alert enrichment and triage, incident timeline assembly, vulnerability-to-owner routing and remediation tracking, pentest recon and reporting, access reviews and joiner/mover/leaver checks, audit evidence collection, threat-intel ingestion, log-source onboarding and policy-as-code checks. Make LLM assistants and agentic coding tools (Claude Code, OpenCode) productive and governed for the team: safe-use standards, data-handling boundaries, shared patterns.



Secure patterns for LLM apps, RAG pipelines, agents and MCP/tool integrations: prompt-injection and data-leakage defences, non-human identity and least privilege, logging that feeds detection. AI system inventory, approval path for new AI tools and vendors, model and vendor risk assessment, shadow-AI discovery with the detection team. Multicloud security baseline across AWS, GCP and Azure: landing zones, guardrails and policy-as-code, logging baseline into the SIEM. Network segmentation between corporate, passenger-facing and airport/ground operational systems. Data protection for passenger and crew data; Ransomware resilience: backup immutability and recovery testing. Regulatory readiness: gap assessments, control mapping and evidence automation for applicable security regulations and standards. 6+ years in security, including 3+ in architecture or senior engineering roles, with an engineering background you still use. ~ Multicloud architecture across AWS, GCP and Azure: identity, network, logging, policy-as-code. ~ Python, APIs, IaC; effective daily use of LLM assistants and agentic coding tools (e.g., Strongly valued: contributions to, or research on, AI security red-teaming agents, guardrail frameworks, agent security patterns, open-source, publications or talks. Data security and privacy architecture (PII, PCI); cloud architecture/security (AZ-305, AZ-500, AWS Solutions Architect Professional, AWS Security Specialty, Google Professional Cloud Security Engineer or Cloud Architect). We believe in a hybrid working model, you can work up to three days per week remote, but you are also going to enjoy the excellent work environment at our modern offices in the heart of Madrid Optional discounts on health insurances (various companies).

📌 Information Security Architect (Comunidad de Madrid)
🏢 Ryanair Group Holdings
📍 Comunidad de Madrid