Information Security Architect - AI & Strategic Initiatives

About the Position

Information Security Architect - AI & Strategic Initiatives

Ryanair Labs, the technology brand of Europe’s Largest Airline Group, is currently recruiting two Information Security Architects to join their team. This is an exciting opportunity to expand operations to 800 aircraft and 300 million guests within the next 10 years.

Responsibilities

• Find: Independently map how the security team works on detection, incident response, vulnerability management, pentesting, IAM, compliance, and spot repeatable manual work, weak controls, and gaps. Threat-model new AI systems and initiatives.
• Design: Create automation and architecture patterns with explicit trade-offs: data boundaries, identity for humans and agents, least-privilege tool access, guardrails, human-in-the-loop for decisions.
• Build: Ship automation, policy-as-code, and proofs of concept. Integrate security tooling via APIs and MCP.
• Verify: Validate with the pentest and detection teams; measure hours removed, error rates, and coverage.
• Evolve: Keep a roadmap and metrics; update patterns as the AI and threat landscape shifts.

Requirements

• Must have:

  • 6+ years in security, including 3+ in architecture or senior engineering roles, with an engineering background you still use.
  • Demonstrated autonomy: examples of automation or initiatives you identified, built, and shipped on your own initiative, with measured results.
  • Deep understanding of how LLM applications, RAG, agents, and tool/MCP integrations are built, and of their attack surface.
  • Multicloud architecture across AWS, GCP, and Azure: identity, network, logging, policy-as-code.
  • Identity and zero-trust architecture, including workload and non-human identities.
  • Threat modelling, secure design, and secure SDLC practice.
  • Hands-on skills: Python, APIs, IaC; effective daily use of LLM assistants and agentic coding tools with critical validation of output.
  • Track record of leading cross-functional initiatives without formal authority: roadmap, business case, delivery.
  • Clear communication with executives and engineers alike.

• Nice to have:

  • Aviation, logistics, or other regulated-sector experience.
  • EU AI Act, ISO/IEC 42001, and NIST AI RMF in practice.
  • Contributions to, or research on, AI security red-teaming agents, guardrail frameworks, agent security patterns, open-source, publications, or talks.
  • Data security and privacy architecture (PII, PCI); SaaS security.
  • OT/ICS and safety-critical system security for airport and ground systems.
  • Certifications: CISSP, CCSP, SABSA, TOGAF; cloud architecture/security.

We Offer

• A competitive but flexible technical career plan.
• Possibility for career growth in a continuously growing team.
• Hybrid working model: up to three days per week remote with excellent work environment at modern offices in Madrid.
• Optional discounts on health insurances.
• Travel discounts.

About the Company

Ryanair Labs is the technology brand of Ryanair. Labs is a state-of-the-art digital & IT innovation hub creating Europe’s Leading Travel Experience for our customers.

Job Location

Madrid, Spain

Apply

I'm interested