Information Security Engineer – Senior Penetration Tester

About the Position

Information Security Engineer – Senior Penetration Tester

Ryanair Labs, the technology brand of Ryanair, is currently recruiting for an Information Security Engineer – Senior Penetration Tester to join Europe’s Largest Airline Group!

This is a very exciting time to join Ryanair as we look to expand our operation to 800 aircraft and 300 million guests within the next 10 years.

Ryanair Labs is a state-of-the-art digital & IT innovation hub creating Europe's Leading Travel Experience for our customers.

Responsibilities

• Scope: Maintain an attack-surface inventory (external, internal, cloud, SaaS, AI systems); threat-model with owners; define rules of engagement and safety constraints, especially around operational systems.
• Test: Manual-first testing following recognized methodologies (OWASP WSTG/ASVS/MASVS, PTES, MITRE ATT&CK), with automation for breadth.
• Prove: Demonstrate real impact with safe proof-of-concept exploits and attack chains; rate with CVSS plus business context. Scanner output is not a finding.
• Fix: Write remediation owners can act on; pair with engineers; convert findings into detection requirements and control improvements for the detection team.
• Verify: Re-test, track closure, measure time-to-remediate and recurrence.

Requirements

• Must have:

  • 4+ years hands-on penetration testing / offensive security.
  • Strong web/API and network/AD testing with manual exploitation, not just scanning.
  • Cloud pentesting in at least two of AWS, GCP, Azure, including IAM and identity attack paths.
  • Scripting in Python (plus Bash/PowerShell); comfortable reading, modifying and writing exploits and tooling.
  • Practical use of MITRE ATT&CK and OWASP methodologies; CVSS and risk-based reporting.
  • AI skillset: effective daily use of LLM assistants and agentic coding tools (e.g., Claude Code, OpenCode) with critical validation of output; working knowledge of how LLM applications, RAG pipelines and agents are built and where they break (OWASP LLM Top 10, MITRE ATLAS); ability to design and run structured tests against AI systems.
  • Safe testing discipline in production and safety-critical environments; strict rules of engagement.
  • Clear written and verbal communication to technical and non-technical stakeholders.

• Nice to have:

  • Contributions to, or research on, AI red-teaming agents building or extending LLM-driven offensive tooling (autonomous recon, exploitation or prompt-injection agents), automated jailbreak and injection evaluation harnesses, or benchmarks for AI security testing. Open-source commits, publications, conference talks or CTF/AI red-team competition results all count.
  • Adversarial ML (evasion, extraction, poisoning) and AI supply-chain risk (models, datasets, dependencies).
  • Certifications: OSCP, OSEP, OSWE, GPEN, GWAPT, GCPN, CRTO; cloud security (AZ-500, AWS Security Specialty, Google Professional Cloud Security Engineer).
  • Mobile (iOS/Android) and thick-client testing; OT/ICS awareness for airport and ground systems.
  • Secure code review and DevSecOps integration (SAST/DAST in CI/CD).
  • Public research, CVEs, bug-bounty or open-source tooling contributions beyond AI.

We Offer

• A competitive but flexible technical career plan.
• Possibility for career growth in a continuously growing team.
• Hybrid working model: up to three days per week remote, with excellent work environment at our modern offices in the heart of Madrid.
• Optional discounts on health insurances (various companies).
• Travel discounts.

About the Company

Ryanair Labs is the technology brand of Ryanair. Labs is a state-of-the-art digital & IT innovation hub creating Europe's Leading Travel Experience for our customers.

Job Location

Madrid, Spain