Senior Penetration Tester – AI/Cloud & App Security (Hybrid)

SmartRecruiters, Inc.; Madrid; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Travel discounts

Health insurance (optional discounts)

Hybrid work model

Job summary

Ryanair Labs is seeking an Information Security Engineer – Senior Penetration Tester to join Europe’s Largest Airline Group. You will perform hands-on testing across web, mobile and API apps, networks, and multi-cloud environments with a focus on practical exploit and remediation work.

You’ll drive threat modelling, build detection requirements, and partner with engineers to close gaps. A hybrid, office-and-remote setup in Madrid supports flexible work arrangements while delivering impactful

Qualifications

• 4+ years hands-on penetration testing / offensive security.
• Strong web/API and network/AD testing with manual exploitation, not just scanning.
• Cloud pentesting in AWS, GCP or Azure, including IAM and identity paths.
• Python scripting (Bash/PowerShell optional).
• MITRE ATT&CK and OWASP methodologies; CVSS and risk-based reporting.
• AI skillset: use of LLM assistants and agentic coding tools with validation; knowledge of LLM security.
• Safe testing discipline in production and safety-critical environments; clear stakeholder communication.

Responsibilities

• Test web, mobile and API applications (external and internal).
• Test networks, identity attack paths and Active Directory/Entra ID.
• Cloud penetration testing across AWS, GCP and Azure; IAM misconfigurations and secrets; CI/CD.
• AI/LLM application testing with prompt injection and data handling safeguards.
• Run adversary emulation and purple-team exercises with detection engineering.
• Build and maintain tooling and automation; leverage LLM assistants for recon and PoC development.
• Produce clear reports and executive summaries for engineers and leadership.

Skills

Penetration testing

Cloud security testing

Python scripting

MITRE ATT&CK

OWASP methodologies

LLM tooling

Adversary emulation

Tools

Claude Code

OpenCode

Job description

Ryanair Labs is seeking an Information Security Engineer – Senior Penetration Tester to join Europe’s Largest Airline Group. You will perform hands-on testing across web, mobile and API apps, networks, and multi-cloud environments with a focus on practical exploit and remediation work.

You’ll drive threat modelling, build detection requirements, and partner with engineers to close gaps. A hybrid, office-and-remote setup in Madrid supports flexible work arrangements while delivering impactful