Ryanair Labs is recruiting an Information Security Engineer – Cloud Security to join Europe's largest airline group
This is a very exciting time for Ryanair as we look to expand our operation to 800 aircraft and 300 million guests within the next ten years.
Ryanair Labs is the technology brand of Ryanair.
Labs is a state-of-the-art digital & IT innovation hub creating Europe's leading travel experience for our customers.
The Role
Senior Cloud Security Engineer responsible for protecting Ryanair's multi-cloud environment (AWS, Azure, GCP).
The role covers:
Designing, implementing, and improving cloud-security controls and automation (CSPM, CNAPP).
Owning the full lifecycle of security metrics and KPIs, giving leadership clear, data-driven visibility of risk and progress.
Driving secure-by-design practices with DevOps and platform teams.
Leading monitoring and incident response for cloud workloads.
Key Responsibilities
Design, implement, and manage security solutions for AWS and Azure.
Develop and enforce security policies, standards, and guardrails.
Automate remediation and "shift-left" security via IaC and CI/CD.
Build real-time detections in SIEM; lead incident response and post-incident reviews.
Define and maintain a KPI framework (e.g., mean-time-to-remediate, policy-violation density, coverage%).
Create automated dashboards (PowerBI, Grafana, QuickSight, etc.) and monthly and quarterly executive reports.
Build ETL/API integrations to ensure security-data accuracy and timeliness.
Support ISO*****, PCI-DSS, NIS2, EASA audits; translate controls into measurable KPIs.
Maintain documentation runbooks, risk registers, and incident logs.
Mentor junior engineers and present findings to technical and non-technical stakeholders.
Requirements
5–7 years in information security, with 3+ years in cloud security.
Deep hands-on knowledge of AWS and Azure security services.
Experience with Wiz or similar CSPM/CNAPP platforms.
Proven ability to build security dashboards (PowerBI, Grafana, QuickSight, Tableau, Looker).
Strong SQL and data-wrangling; Python (Pandas), PowerShell, or Bash for ETL/automation.
Track record of establishing KPI taxonomies and SLA/OCR monitoring.
Ability to translate raw data into concise visuals and executive narratives.
IaC & DevOps experience with CloudFormation, CDK/Terraform, and CI/CD pipelines.
Extensive Linux experience.
Security certifications (AWS Security Specialty, Azure Security Engineer, CISSP) a plus.
Familiar with PCI, ISO*****, NIS2, EASA requirements.
Excellent communication, risk awareness, problem-solving, and mentoring skills.
Benefits
Discounted and unlimited travel to over 250 destinations.
Defined Contribution Pension Scheme – Matched up to 5% or €5,000.
Death in Service Benefit – Up to 2 times of annual basic salary.
20 Days Annual Leave – Increasing to 22 days after 12 months and 25 days after 3 years of continuous service.
Option for up to 5 additional unpaid leave days per year.
Cycle 2 Work Scheme.
Unrivalled career progression.
Competencies
Cloud
Information Security
Data Visualisation
Communication
#J-*****-Ljbffr