Cloud Application Security Engineer

Be the one building AI-powered experiences where they matter most.

At Genesys, we help organizations create better customer experiences through AI-powered experience orchestration. Our platform connects people, systems, data and AI to help organizations deliver more personalized service, improve operational efficiency and build stronger customer relationships.

Help build, support and operate technology used by more than 8,000 organizations in over 100 countries – moving AI from possibility to production in real-world enterprise environments every day.

Protecting a continuously evolving, multi-tenant SaaS platform requires security decisions that distinguish genuine customer risk from an increasing volume of automated findings. As a Principal Cloud Application Security Engineer in Genesys Cloud Product Security, you will shape how application security scales across cloud accounts, regions, APIs, applications, distributed services, software supply chains, and AI-powered product capabilities.

You will own the technical direction of a small Application Security team while remaining hands-on with complex security analysis, detection engineering, vulnerability triage, and cloud security. Your work will determine where security coverage needs to deepen, which findings represent meaningful exploitability, and how specialist engineering capacity is focused on risks that could affect customer data, tenant isolation, platform integrity, or service security.

AI-assisted development and security analysis are changing both the speed of software delivery and the volume of potential vulnerabilities that security teams must evaluate. You will define how Genesys uses AI and automation to improve vulnerability triage, identify gaps across source code and security tooling, reduce false positives, and establish appropriate human validation for security decisions where context and judgment remain essential.

Genesys Cloud primarily runs on AWS, and you will apply deep cloud security expertise to reason across identity, attack paths, infrastructure exposure, application behavior, and distributed architectures at enterprise scale. This Principal-level individual contributor role provides visibility across enterprise security initiatives, close partnership with engineering and senior leaders, and the opportunity to influence how application and cloud security capabilities evolve as the Genesys Cloud platform and its AI capabilities expand.

• Lead the technical direction of a small Application Security team, strengthening engineering judgment, security standards, and team capability through hands-on leadership and mentoring
• Own the end-to-end application security operating model, directing how detection coverage evolves, how increasing finding volume is absorbed, and where engineering investment delivers the greatest reduction in exploitable risk
• Drive scalable detection coverage across SAST, SCA, DAST, secrets scanning, mobile application security testing, cloud security posture management, and emerging security capabilities, partnering with security teams to shape tool selection, configuration, tuning, and rule sets
• Expand security visibility across web applications, APIs, mobile applications, cloud environments, AI-powered product capabilities, and software supply chains to identify systemic risks and coverage gaps that individual tools cannot reveal
• Establish meaningful security coverage metrics that demonstrate both what testing discovers and how effectively the relevant application and platform attack surface is assessed
• Own exploitability assessment across automated findings, bug bounty submissions, customer penetration tests, internal assessments, and AI-generated analysis, evaluating reachability, tenant isolation, customer data exposure, affected assets, and blast radius
• Drive consistent and defensible vulnerability decisions through evidence, reproduction, severity rationale, triage runbooks, validation checklists, and known-issue patterns that separate exploitable vulnerabilities from false positives, duplicates, theoretical findings, and accepted risk
• Lead investigation and escalation of high-risk application and cloud security issues, including cross-tenant access, authentication and authorization bypass, sensitive data exposure, production secrets, and externally reachable cloud resources
• Develop AI and automation capabilities that increase security team capacity by improving vulnerability triage, analyzing penetration-test-style reports, identifying false positives, drafting responses, prioritizing findings requiring specialist judgment, and exposing detection gaps across tools and source code
• Define appropriate trust boundaries for AI-assisted security decisions, establishing human validation points and evolving those controls as models, security tooling, attack techniques, and engineering practices change
• Strengthen vulnerability intake and tracking across security tools, bug bounty submissions, customer penetration tests, internal assessments, and other detection sources to improve consistency, traceability, and scalability
• Coordinate the bug bounty program and customer penetration testing workflows, partnering with Sales, Technical Account Managers, Customer Success Managers, penetration testers, and product teams to validate, communicate, and route security findings effectively
• Produce clear, evidence-based security findings, severity decisions, and reusable customer responses that engineering teams, account teams, and customer security stakeholders can act on without additional interpretation
• Partner across Product Security, Security Architecture, Security Development, Security Operations, Penetration Testing, DevOps, engineering, and product teams to convert recurring vulnerabilities and security anti-patterns into scalable preventive controls
• Influence application security strategy across Genesys Cloud by connecting individual findings, systemic weaknesses, detection gaps, and emerging attack techniques to longer-term platform security priorities

We know strong candidates may not meet every item listed above. We will consider candidates with strong application and API security judgment, a record of building capability rather than operating it, and the appetite to scale a security function with automation rather than headcount.

Learn more about our culture, AI innovation and sustainability commitments through our Careers site and Sustainability Report.

What Happens After You Apply

After you apply, here's what you can typically expect:

Every application is reviewed by a person. Response times may vary by role and location, but our team will keep you informed throughout the process.

Stay Connected

Stay connected to learn more about how we're applying AI to customer and employee experience challenges and get notified when relevant opportunities become available.

Get notified about relevant opportunities.

Be the one building what's next - where AI, experience and impact come together.

Employee Referral

If a Genesys employee referred you, please apply using the link they shared so we can connect your application to their referral.

Genesys® empowers more than 8,000 organizations worldwide to create the best customer and employee experiences. Genesys Cloud™ is the Agentic Orchestration Platform that securely connects people, systems, data and AI across the enterprise with built-in governance and control. As a result, organizations can drive customer loyalty, growth and retention while increasing operational efficiency and teamwork across human and AI workforces. To learn more, visit www.genesys.ai.

Reasonable Accommodations:

If you require a reasonable accommodation to complete any part of the application process, or are limited in your ability to access or use this online application and need an alternative method for applying, you or someone you know may contact us at reasonable.accommodations@genesys.com.

You can expect a response within 24–48 hours. To help us provide the best support, click the email link above to open a pre-filled message and complete the requested information before sending. If you have any questions, please include them in your email.

This email is intended to support job seekers requesting accommodations. Messages unrelated to accommodation—such as application follow-ups or resume submissions—may not receive a response.

Genesys is an equal opportunity employer committed to fairness in the workplace. We evaluate qualified applicants without regard to race, color, age, religion, sex, sexual orientation, gender identity or expression, marital status, domestic partner status, national origin, genetics, disability, military and veteran status, and other protected characteristics.

Please note that recruiters will never ask for sensitive personal or financial information during the application phase.