Senior Threat Detection & Response Engineer – Hybrid & Travel Perks

Ryanair Group Holdings; Madrid; Hybride; EUR 110 000 - 140 000; Plein temps

Avantages offerts par ce poste

Travel discounts

Hybrid work model

Résumé du poste

Ryanair Labs is recruiting for two Information Security - Senior Threat Detection & Response Engineers to join Europe’s Largest Airline Group. You will proactively identify telemetry gaps, develop detections as code, and lead incident response activities across on-prem, AWS, GCP and Azure environments.

The role emphasizes threat hunting, adversary emulation, and automation using SIEM/EDR tools, with a hybrid work model and opportunities to impact aviation security at scale.

Qualifications

• 6+ years in detection engineering, SOC or IR.
• Experience with cloud telemetry and incident response.

Responsabilités

• Own detection and visibility across AWS, GCP, Azure control planes and identity.
• Run purple-team exercises and convert findings into detections and mitigations.
• Hunt proactively for uncovered techniques and lead containment during incidents.
• Automate enrichment, triage and response where it removes manual toil.
• Produce coverage and performance metrics for leadership.

Connaissances

Detection engineering

SOC analyst

Incident response

SIEM

EDR

Sigma rules

Multi-cloud security

Python/PowerShell

Git & CI

MITRE ATT&CK

Formation

Bachelor's in Cyber Security/CS

Outils

Microsoft Sentinel

Splunk

Elastic/OpenSearch

Sigma

KQL/SPL

Description du poste

Ryanair Labs is recruiting for two Information Security - Senior Threat Detection & Response Engineers to join Europe’s Largest Airline Group. You will proactively identify telemetry gaps, develop detections as code, and lead incident response activities across on-prem, AWS, GCP and Azure environments.

The role emphasizes threat hunting, adversary emulation, and automation using SIEM/EDR tools, with a hybrid work model and opportunities to impact aviation security at scale.