Ryanair Labs is seeking an Information Security Analyst to join Europe’s largest airline group. The role supports the vulnerability management function, analyzing vulnerabilities and prioritizing remediation actions to protect systems and data. Responsibilities include administering and managing the vulnerability scanning infrastructure, coordinating with IT teams to identify and remediate vulnerabilities, working with internal security testers on security bugs in internally developed applications, defining compensating controls and remediation tasks, and generating metrics to support the vulnerability and patch management program. Qualifications include experience with infrastructure and web application scanning tools (e.g., Qualys, Nexpose, Veracode, BURP Enterprise), familiarity with regulatory and audit reporting related to cyber risk, strong understanding of network/infrastructure and web/mobile application weaknesses and anti-patterns (CWE, OWASP), knowledge of information security principles and best practices, at least two years of cybersecurity experience, open-source tooling familiarity, cloud experience (AWS, Azure), hands-on security operations or security engineering background. The position offers a permanent contract after trial period, a hybrid model with 2 days per week in the Wroclaw office, and benefits such as travel discounts, Multisport card, private health care, group insurance, and opportunities for trainings and conferences.

Ryanair Labs is seeking an Information Security Analyst to join Europe’s largest airline group. The role supports the vulnerability management function, analyzing vulnerabilities and prioritizing remediation actions to protect systems and data. Responsibilities include administering and managing the vulnerability scanning infrastructure, coordinating with IT teams to identify and remediate vulnerabilities, working with internal security testers on security bugs in internally developed applications, defining compensating controls and remediation tasks, and generating metrics to support the vulnerability and patch management program. Qualifications include experience with infrastructure and web application scanning tools (e.g., Qualys, Nexpose, Veracode, BURP Enterprise), familiarity with regulatory and audit reporting related to cyber risk, strong understanding of network/infrastructure and web/mobile application weaknesses and anti-patterns (CWE, OWASP), knowledge of information security principles and best practices, at least two years of cybersecurity experience, open-source tooling familiarity, cloud experience (AWS, Azure), hands-on security operations or security engineering background. The position offers a permanent contract after trial period, a hybrid model with 2 days per week in the Wroclaw office, and benefits such as travel discounts, Multisport card, private health care, group insurance, and opportunities for trainings and conferences.