Senior Penetration Tester: Cloud, AI & App Security

Ryanair Ltd.; Wrocław; Hybrid; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Staff travel benefits

Multisport card

Training & certifications

City centre office

Job summary

Ryanair Labs is seeking an Information Security Engineer – Senior Penetration Tester to join Europe’s largest airline group. You will perform hands-on testing across web, mobile, APIs, internal networks and multi-cloud environments (AWS, GCP, Azure), then prove impact, drive fixes with owners, and re-test for remediation.

You’ll build tooling for recon, perform adversary emulation, and deliver clear reports to engineers and leadership, with a hybrid office pattern and staff travel benefits.

Qualifications

• 4+ years hands-on penetration testing / offensive security.
• Strong web/API and network/AD testing with manual exploitation, not just scanning.
• Cloud pentesting in AWS, GCP, Azure, including IAM and identity attack paths.
• Scripting in Python (plus Bash/PowerShell); capable of reading, modifying and writing exploits.
• Use of MITRE ATT&CK and OWASP methodologies; CVSS and risk-based reporting.
• AI skills: daily use of LLM assistants and agentic coding tools with validation of output; understanding LLM apps and RAG pipelines.

Responsibilities

• Test passenger-facing and internal web, mobile and API applications.
• Test internal/external networks, Active Directory / Entra ID and identity attack paths.
• Cloud penetration testing across AWS, GCP and Azure: IAM privilege escalation, misconfigurations, exposed services, CI/CD and secrets.
• AI/LLM application testing: prompt injection, jailbreaks, insecure output handling, RAG data leakage and poisoning, mapped to OWASP Top 10 for LLM Applications.
• Run adversary emulation and purple-team exercises with detection engineering.
• Build and maintain tooling and automation; use LLM assistants and agentic coding tools for recon, PoC development, output parsing and report drafting, validating results.
• Write clear reports and executive summaries; present findings to engineers and leadership.

Skills

Penetration testing

Web testing

API security

Network security

AD/Identity testing

Python scripting

MITRE ATT&CK

AI/LLM testing

Tools

Claude Code

OpenCode

LLM assistants

Job description

Ryanair Labs is seeking an Information Security Engineer – Senior Penetration Tester to join Europe’s largest airline group. You will perform hands-on testing across web, mobile, APIs, internal networks and multi-cloud environments (AWS, GCP, Azure), then prove impact, drive fixes with owners, and re-test for remediation.

You’ll build tooling for recon, perform adversary emulation, and deliver clear reports to engineers and leadership, with a hybrid office pattern and staff travel benefits.