Senior Penetration Tester: Cloud, AI & App Security

Ryanair - Europe's Favourite Airline; Madrid; Hybrid; EUR 75,000 - 120,000; Full time

Benefits offered by this job

Health insurance discounts

Travel discounts

Job summary

Ryanair Labs is seeking an Information Security Engineer – Senior Penetration Tester to join Europe’s Largest Airline Group. You will identify exploitable weaknesses across web, mobile, APIs, and cloud environments (AWS, GCP, Azure) and drive fixes with ownership teams.

Role emphasizes hands-on testing, verification, and turning findings into detection and hardening requirements in a lean security team, based in Madrid with hybrid work options.

Qualifications

• 4+ years of hands-on penetration testing / offensive security.
• Strong web/API and network/AD testing with manual exploitation.
• Cloud pentesting in at least two of AWS, GCP, Azure including IAM.
• Python scripting with Bash/PowerShell familiarity.
• MITRE ATT&CK and OWASP methodologies; CVSS-based reporting.
• AI skills with LLM assistants and agentic coding tools; understanding of LLM applications.

Responsibilities

• Test passenger‑facing and internal web, mobile and API applications.
• Test internal/external networks, Active Directory / Entra ID and identity attack paths.
• Cloud penetration testing across AWS, GCP and Azure: IAM privilege escalation, misconfigurations, exposed services.
• AI/LLM application testing: prompt injection, data leakage, RAG handling and MITRE ATLAS alignment.
• Run adversary emulation and purple‑team exercises with detection engineering.
• Build and maintain tooling and automation; use LLM assistants for recon, PoC, and report drafting.
• Write clear reports and executive summaries; present findings to engineers and leadership.

Skills

Penetration testing

Web/API testing

Cloud pentesting

Python scripting

MITRE ATT&CK

OWASP methodologies

LLM tooling (Claude Code/OpenCode)

Communication skills

Production safety testing

Tools

Claude Code

OpenCode

Job description

Ryanair Labs is seeking an Information Security Engineer – Senior Penetration Tester to join Europe’s Largest Airline Group. You will identify exploitable weaknesses across web, mobile, APIs, and cloud environments (AWS, GCP, Azure) and drive fixes with ownership teams.

Role emphasizes hands-on testing, verification, and turning findings into detection and hardening requirements in a lean security team, based in Madrid with hybrid work options.