Senior Penetration Tester: Cloud, AI & App Security

Ryanair Group Holdings; Wrocław; On-site; PLN 200,000 - 320,000; Full time

Benefits offered by this job

Staff travel benefits

Multisport card

Job summary

Ryanair Labs is seeking an Information Security Engineer – Senior Penetration Tester to join Europe’s largest airline group. This hands-on role focuses on finding exploitable weaknesses across web, mobile, APIs, networks, and multi-cloud environments (AWS, GCP, Azure) with a bias toward practical impact.

You’ll own testing from discovery to remediation, drive fixes with owners, re-test, and contribute to detection and hardening requirements.

Qualifications

• 4+ years hands-on penetration testing / offensive security.
• Strong web/API and network/AD testing with manual exploitation, not just scanning.
• Cloud pentesting in at least two of AWS, GCP, Azure, including IAM and identity attack paths.
• Scripting in Python (plus Bash/PowerShell); comfortable reading, modifying and writing exploits and tooling.
• Practical use of MITRE ATT&CK and OWASP methodologies; CVSS and risk-based reporting.
• AI skillset: effective daily use of LLM assistants and agentic coding tools with critical validation of output; knowledge of LLM apps and RAG pipelines.

Responsibilities

• Test passenger-facing and internal web, mobile and API applications.
• Test internal/external networks, Active Directory / Entra ID and identity attack paths.
• Cloud penetration testing across AWS, GCP and Azure: IAM privilege escalation, misconfigurations, exposed services, CI/CD and secrets.
• AI/LLM application testing: prompt injection, jailbreaks, insecure output handling, data leakage and poisoning.
• Run adversary emulation and purple-team exercises with detection engineering.
• Build tooling and automation; use LLM assistants for recon, PoC development and report drafting.
• Write clear reports and executive summaries; present findings to engineers and leadership.

Skills

Penetration testing

Web/API testing

Network/AD testing

Python scripting

MITRE ATT&CK

OWASP methodologies

AI security testing

Effective communication

Tools

Claude Code

OpenCode

Job description

Ryanair Labs is seeking an Information Security Engineer – Senior Penetration Tester to join Europe’s largest airline group. This hands-on role focuses on finding exploitable weaknesses across web, mobile, APIs, networks, and multi-cloud environments (AWS, GCP, Azure) with a bias toward practical impact.

You’ll own testing from discovery to remediation, drive fixes with owners, re-test, and contribute to detection and hardening requirements.