Ryanair Labs is seeking a Senior Cloud Security Engineer to protect Ryanair’s multi-cloud environment (AWS, Azure, and GCP) and drive secure-by-design practices across the organization. The role covers designing, implementing, and improving cloud-security controls and automation (CSPM, CNAPP), owning the full lifecycle of security metrics and KPIs, and providing leadership with data-driven visibility of risk and progress. You will partner with DevOps and platform teams to enforce secure-by-design principles, lead monitoring and incident response for cloud workloads, and support audits (ISO 27001, PCI-DSS, NIS2, EASA).

Key responsibilities include: designing, implementing, and managing security solutions for AWS and Azure; developing and enforcing security policies, standards, and guardrails; automating remediation and shift-left security via IaC and CI/CD; building real-time detections in SIEM and leading incident response and post-incident reviews; defining and maintaining KPI frameworks; creating automated dashboards (Power BI, Grafana, QuickSight, etc.) and monthly/quarterly executive reports; building ETL API integrations to ensure security data accuracy and timeliness; supporting ISO 27001, PCI-DSS, NIS2, and EASA audits; maintaining runbooks, risk registers, and incident logs; mentoring junior engineers and presenting findings to technical and non-technical stakeholders.

Qualifications include 5–7 years in information security with 3+ years in cloud security; deep hands-on knowledge of AWS and Azure security services; experience with Wiz or similar CSPM/CNAPP platfo

Ryanair Labs is seeking a Senior Cloud Security Engineer to protect Ryanair’s multi-cloud environment (AWS, Azure, and GCP) and drive secure-by-design practices across the organization. The role covers designing, implementing, and improving cloud-security controls and automation (CSPM, CNAPP), owning the full lifecycle of security metrics and KPIs, and providing leadership with data-driven visibility of risk and progress. You will partner with DevOps and platform teams to enforce secure-by-design principles, lead monitoring and incident response for cloud workloads, and support audits (ISO 27001, PCI-DSS, NIS2, EASA).

Key responsibilities include: designing, implementing, and managing security solutions for AWS and Azure; developing and enforcing security policies, standards, and guardrails; automating remediation and shift-left security via IaC and CI/CD; building real-time detections in SIEM and leading incident response and post-incident reviews; defining and maintaining KPI frameworks; creating automated dashboards (Power BI, Grafana, QuickSight, etc.) and monthly/quarterly executive reports; building ETL API integrations to ensure security data accuracy and timeliness; supporting ISO 27001, PCI-DSS, NIS2, and EASA audits; maintaining runbooks, risk registers, and incident logs; mentoring junior engineers and presenting findings to technical and non-technical stakeholders.

Qualifications include 5–7 years in information security with 3+ years in cloud security; deep hands-on knowledge of AWS and Azure security services; experience with Wiz or similar CSPM/CNAPP platfo