Senior Information Security Engineer & Penetration Tester

Ryanair - Europe's Favourite Airline; Wrocław; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Staff travel benefits from day one

Multisport card

Private health care

Group insurance scheme

Job summary

Ryanair Labs in Europe’s largest airline group is hiring an Information Security Engineer – Senior Penetration Tester to join a lean security team. You will identify weaknesses across web, mobile apps, APIs, networks and multi-cloud environments (AWS, GCP, Azure).

You’ll prove impact with PoCs, drive fixes with owners, re-test, and verify outcomes. The role includes AI/LLM security testing, adversary emulation, and developing automation and clear reports for engineering and leadership.

Qualifications

• 4+ years hands-on penetration testing / offensive security.
• Strong web/API and network/AD testing with manual exploitation.
• Cloud pentesting in at least two of AWS, GCP, Azure, including IAM and identity attack paths.
• Scripting in Python (plus Bash/PowerShell); comfortable reading, modifying and writing exploits and tooling.
• MITRE ATT&CK and OWASP methodologies; CVSS and risk-based reporting.
• AI skillset: effective daily use of LLM assistants and agentic coding tools with critical validation of output; knowledge of LLM security.
• Safe testing discipline in production and safety-critical environments; strict rules of engagement.
• Clear written and verbal communication to technical and non-technical stakeholders.

Responsibilities

• Test passenger-facing and internal web, mobile and API applications.
• Test internal/external networks, Active Directory / Entra ID and identity attack paths.
• Cloud penetration testing across AWS, GCP and Azure: IAM privilege escalation, misconfigurations, exposed services, CI/CD and secrets.
• AI/LLM application testing: prompt injection, jailbreaks, insecure output handling, data leakage and poisoning; map to OWASP Top 10 for LLM.
• Run adversary emulation and purple-team exercises with detection engineering.
• Build and maintain tooling and automation; use LLM assistants and coding tools for recon, PoC development, and reporting.
• Write clear reports and executive summaries; present findings to engineers and leadership.

Skills

Penetration testing

Web/API testing

Network/AD testing

Python scripting

MITRE ATT&CK

OWASP methodologies

AI/LLM tooling

Adversarial testing

Tools

AWS

GCP

Azure

Job description

Ryanair Labs in Europe’s largest airline group is hiring an Information Security Engineer – Senior Penetration Tester to join a lean security team. You will identify weaknesses across web, mobile apps, APIs, networks and multi-cloud environments (AWS, GCP, Azure).

You’ll prove impact with PoCs, drive fixes with owners, re-test, and verify outcomes. The role includes AI/LLM security testing, adversary emulation, and developing automation and clear reports for engineering and leadership.