[Hiring] Principal Cloud Application Security Engineer @Genesys

Role Description

Be the one building AI-powered experiences where they matter most. At Genesys, we help organizations create better customer experiences through AI-powered experience orchestration. Our platform connects people, systems, data, and AI to help organizations deliver more personalized service, improve operational efficiency, and build stronger customer relationships.

Help build, support, and operate technology used by more than 8,000 organizations in over 100 countries – moving AI from possibility to production in real-world enterprise environments every day.

Protecting a continuously evolving, multi-tenant SaaS platform requires security decisions that distinguish genuine customer risk from an increasing volume of automated findings. As a Principal Cloud Application Security Engineer in Genesys Cloud Product Security, you will shape how application security scales across cloud accounts, regions, APIs, applications, distributed services, software supply chains, and AI-powered product capabilities.

You will own the technical direction of a small Application Security team while remaining hands-on with complex security analysis, detection engineering, vulnerability triage, and cloud security. Your work will determine where security coverage needs to deepen, which findings represent meaningful exploitability, and how specialist engineering capacity is focused on risks that could affect customer data, tenant isolation, platform integrity, or service security.

AI-assisted development and security analysis are changing both the speed of software delivery and the volume of potential vulnerabilities that security teams must evaluate. You will define how Genesys uses AI and automation to improve vulnerability triage, identify gaps across source code and security tooling, reduce false positives, and establish appropriate human validation for security decisions where context and judgment remain essential.

Genesys Cloud primarily runs on AWS, and you will apply deep cloud security expertise to reason across identity, attack paths, infrastructure exposure, application behavior, and distributed architectures at enterprise scale. This Principal-level individual contributor role provides visibility across enterprise security initiatives, close partnership with engineering and senior leaders, and the opportunity to influence how application and cloud security capabilities evolve as the Genesys Cloud platform and its AI capabilities expand.

Qualifications

• 10+ years of relevant experience across application security, product security, penetration testing, vulnerability management, cloud security, or closely related security engineering disciplines, including significant recent depth in web and API security.
• Demonstrated expertise assessing real-world exploitability across authorization flaws, authentication weaknesses, injection vulnerabilities, SSRF, business logic abuse, sensitive data exposure, and multi-tenant isolation risks.
• Strong experience implementing, configuring, or tuning application security capabilities such as SAST, SCA, DAST, secrets scanning, mobile application security testing, or cloud security posture management.
• Proven experience building or materially expanding security detection capabilities, with sound judgment across coverage depth, false positives, operational cost, engineering effort, and security trade-offs.
• Demonstrated success building automation that improved security team capacity, consistency, coverage, or triage efficiency, combined with the judgment to identify where automated decisions require human oversight.
• Strong understanding of cloud-hosted, multi-tenant architectures and the ability to reason about attack paths, trust boundaries, identity, authorization, data isolation, and externally exposed services.
• Strong cloud security experience, preferably with AWS, including security controls, identity, attack paths, infrastructure exposure, and security posture across large-scale cloud environments.
• Demonstrated technical leadership through formal or informal leadership of a small team, mentoring security engineers, leading complex initiatives, or setting technical direction across multiple contributors.
• Strong written and verbal communication skills, with the ability to explain exploitability, severity, security findings, and remediation considerations to engineering, product, senior leadership, customer-facing teams, and non-specialist audiences.
• Proven ability to collaborate across shared areas of ownership with security, engineering, DevOps, and product teams while maintaining clear accountability and productive working relationships.
• Demonstrated discretion when handling sensitive vulnerability information, customer security findings, researcher communications, and confidential security data.

Requirements

• Deep cloud security experience with AWS, or transferable cloud security expertise gained in Microsoft Azure or Google Cloud Platform (GCP).
• Familiarity with OWASP API Security Top 10, OWASP Web Security Testing Guide, or established mobile application security testing practices.
• Experience with secure SDLC practices, CI/CD security integration, threat modeling, secure design review, or security architecture.
• Experience designing, building, or operating AI or LLM-assisted security and engineering workflows.
• Hands-on depth in Android or iOS application security or cloud security posture management across large-scale distributed environments.
• Experience with software supply chain security, including dependency risk, malicious package detection, software bills of materials (SBOM), build integrity, or provenance.
• Familiarity with security and compliance frameworks such as SOC 2, PCI DSS, FedRAMP, or HIPAA and their implications for security evidence and engineering controls.
• Proficiency with Python, TypeScript, Bash, Go, or another language suitable for developing security tooling, integrations, and automation.
• Experience securing REST APIs, OAuth-based architectures, service-to-service integrations, event-driven systems, microservices, or other distributed SaaS architectures.
• Experience working with bug bounty programs, customer penetration testing, vulnerability disclosure, or remediation workflows.

Benefits

• AI at enterprise scale – Build, support and operate AI-powered technology used by more than 8,000 organizations worldwide. 150+ new AI features were released in the last fiscal year.
• A flexible-first culture – Join a global team of nearly 7,000 employees with flexible ways of working designed to help people do their best work.
• Growth in the AI era – Build future-ready skills through mentorship, learning programs, leadership development, and education support.
• Time to recharge and give back – Benefits include paid volunteer time, August Free Fridays, well-being resources, and regionally tailored programs for employees and their families.
• Recognized globally – Genesys is Great Place to Work® certified in 17 countries and 94% of employees are proud to tell others they work at Genesys.