-
Ryanair - Europe's Favourite Airline
View all jobs
Information Security Engineer – Cyber Threat Detection & Response
Poland
· Full-time
·
Entry
Description
Ryanair Labs are currently recruiting for a Information Security Engineer – Cyber Threat Detection & Response to join Europe’s Largest Airline Group!
This is a very exciting time to join Ryanair as we look to expand our operation to 800 aircraft and 300 million guests within the next 10 years.
Ryanair Labs is the technology brand of Ryanair. Labs is a state of-the-art digital & IT innovation hub creating Europe’s Leading Travel Experience for our customers.
The Role
We are seeking an experienced Senior Threat Detection & Response Engineer to join our cybersecurity team supporting a fast-paced, cost-sensitive airline environment. The ideal candidate has a strong technical background in detection engineering, incident response and computer forensics. You will be responsible for developing actionable detections, responding to security incidents, and producing insightful KPI reports to support decision-making and regulatory compliance.
Key Responsibilities
Our offer:
Competencies
Cloud
Coding / Programming
Cyber Security Awareness
Communication
Ryanair Labs are currently recruiting for a Information Security Engineer – Cyber Threat Detection & Response to join Europe’s Largest Airline Group!
This is a very exciting time to join Ryanair as we look to expand our operation to 800 aircraft and 300 million guests within the next 10 years.
Ryanair Labs is the technology brand of Ryanair. Labs is a state of-the-art digital & IT innovation hub creating Europe’s Leading Travel Experience for our customers.
The Role
We are seeking an experienced Senior Threat Detection & Response Engineer to join our cybersecurity team supporting a fast-paced, cost-sensitive airline environment. The ideal candidate has a strong technical background in detection engineering, incident response and computer forensics. You will be responsible for developing actionable detections, responding to security incidents, and producing insightful KPI reports to support decision-making and regulatory compliance.
Key Responsibilities
- Develop and tune threat detection rules across SIEM, EDR, and cloud environments.
- Lead containment, eradication, and recovery efforts for cyber incidents.
- Create and maintain dashboards to track KPIs such as MTTD, MTTR, detection coverage, and investigation volume.
- Perform threat hunting based on current threat intelligence and adversary TTPs.
- Automate alert enrichment, triage, and response workflows using SOAR or scripting (Python/PowerShell).
- Collaborate with IT, cloud, and compliance teams to enhance detection quality and response readiness.
- Contribute to documentation, playbooks, and continuous process improvement.
- 6+ years in SOC, IR, or threat detection roles
- Hands-on experience with SIEM (e.g., Microsoft Sentinel, Splunk), EDR (e.g., Defender, CrowdStrike)
- Experience with Azure/AWS cloud security logs and detection use cases
- Practical knowledge of MITRE ATT&CK
- Ability to produce meaningful metrics and dashboards (e.g., Sentinel Workbooks, Power BI, Kibana)
- Strong scripting skills (Python, PowerShell)
- Clear communication skills across technical and non-technical stakeholders
- Experience in aviation, logistics, or other regulated sectors
- Familiarity with SOAR platforms
- Certifications such as GCIA, GCIH, OSCP, or cloud security (AZ-500, AWS Security Specialty)
- Understanding of NIS2 or EASA cybersecurity guidance
Our offer:
- Contract of employment (permanent after trial period)
- Hybrid home office (2 days per week from the office, 3 days remote)
- Discounted and unlimited travel to over 250 destinations
- Multisport card
- Private health care
- Group insurance scheme
- Possibility to take part in conferences, training and courses
- Office located in the city center with a view for an Old Market Square
- Annual events (i.e. St. Patrick’s Day 🍀)
- Regular social meetings 🍻
- Paid referral system
- New office building surrounded by great dinettes right in the city centre 🌆
Competencies
Cloud
Coding / Programming
Cyber Security Awareness
Communication
Key Skills
Ranked by relevance
cloud
cloud security
cybersecurity
siem
incident response
power bi
python
splunk
oscp
aws
Related Jobs
3 roles aligned with this opportunity
View Job Details
Related
Senior Cyber Analyst
2026-05-26
Full-time
Not Applicable
Australia
Airlines
Engineering
View Job Details
Related
ATR - Cybersecurity Manager
2026-05-25
Full-time
Not Applicable
France
Aviation
Information Technology
View Job Details
Related
Administrateur Cybersécurité & Exploitation SI H/F
2026-05-25
Full-time
Not Applicable
France
Airlines
Information Technology
Login to Apply
- Posted
- Jul 28, 2025
- Type
- Full-time
- Level
- Entry
- Location
- Wrocław
Industries
Airlines
Aviation
Categories
Information Technology
Related Jobs
3 roles aligned with this opportunity
View Job Details
Related
Senior Cyber Analyst
2026-05-26
Full-time
Not Applicable
Australia
Airlines
Engineering
View Job Details
Related
ATR - Cybersecurity Manager
2026-05-25
Full-time
Not Applicable
France
Aviation
Information Technology
View Job Details
Related
Administrateur Cybersécurité & Exploitation SI H/F
2026-05-25
Full-time
Not Applicable
France
Airlines
Information Technology