Information Security Engineer – Cyber Threat Detection & Response

Ryanair Ltd.; Madrid; Híbrido; EUR 60.000 - 80.000; Jornada completa

Descripción de la vacante

A leading airline company in Madrid is seeking an experienced Information Security Engineer to join their cybersecurity team. You will develop detections, respond to incidents, and produce KPI reports. Ideal candidates have over 6 years of experience in threat detection, with a strong background in SIEM tools and cloud security. The role supports a hybrid work model, allowing for flexible remote work options, while offering opportunities for career advancement in a fast-paced environment.

Servicios

Health insurance discounts

Agile working environment

Technical career plan flexibility

Formación

• 6+ years in SOC, IR, or threat detection roles.
• Hands-on experience with SIEM and EDR tools.
• Experience with Azure/AWS cloud security logs.

Responsabilidades

• Develop and tune threat detection rules across environments.
• Lead containment and recovery efforts for cyber incidents.
• Create and maintain dashboards to track key performance indicators.

Conocimientos

Detection engineering

Incident response

Computer forensics

Clear communication

Herramientas

Microsoft Sentinel

Splunk

Defender

CrowdStrike

Power BI

Kibana

Descripción del empleo

Information Security Engineer – Cyber Threat Detection & Response

Ryanair Labs are currently recruiting for a Information Security Engineer – Cyber Threat Detection & Response to join Europe’s Largest Airline Group!

This is a very exciting time to join Ryanair as we look to expand our operation to 800 aircraft and 300 million guests within the next 10 years.

Ryanair Labs is the technology brand of Ryanair. Labs is a state of-the-art digital & IT innovation hub creating Europe’s Leading Travel Experience for our customers.

The Role:

We are seeking an experienced Senior Threat Detection & Response Engineer to join our cybersecurity team supporting a fast-paced, cost-sensitive airline environment. The ideal candidate has a strong technical background in detection engineering, incident response and computer forensics. You will be responsible for developing actionable detections, responding to security incidents, and producing insightful KPI reports to support decision-making and regulatory compliance.

Key Responsibilities:

• Develop and tune threat detection rules across SIEM, EDR, and cloud environments.
• Lead containment, eradication, and recovery efforts for cyber incidents.
• Create and maintain dashboards to track KPIs such as MTTD, MTTR, detection coverage, and investigation volume.
• Perform threat hunting based on current threat intelligence and adversary TTPs.
• Automate alert enrichment, triage, and response workflows using SOAR or scripting (Python/PowerShell).
• Collaborate with IT, cloud, and compliance teams to enhance detection quality and response readiness.
• Contribute to documentation, playbooks, and continuous process improvement.

Requirements

• 6+ years in SOC, IR, or threat detection roles
• Hands-on experience with SIEM (e.g., Microsoft Sentinel, Splunk), EDR (e.g., Defender, CrowdStrike)
• Experience with Azure/AWS cloud security logs and detection use cases
• Practical knowledge of MITRE ATT&CK
• Ability to produce meaningful metrics and dashboards (e.g., Sentinel Workbooks, Power BI, Kibana)
• Clear communication skills across technical and non-technical stakeholders

Nice to have:

• Experience in aviation, logistics, or other regulated sectors
• Familiarity with SOAR platforms
• Certifications such as GCIA, GCIH, OSCP, or cloud security (AZ-500, AWS Security Specialty)
• Understanding of NIS2 or EASA cybersecurity guidance
• We promote innovation, all our teams are Agile and several PoCs of new technologies or innovative ideas are launched every week.
• A competitive but flexible technical career plan.
• We believe in an hybrid working model, you can work up to three days per week remote, but you are also going to enjoy the excellent work environment at our modern offices in the heart of Madrid.
• Optional discounts on health insurances(various companies).