1 day ago
Remote, IrelandStaff+
Responsibilities
- Lead the technical direction of a small Application Security team through hands-on leadership and mentoring.
- Own and evolve the end-to-end application security operating model, including detection coverage, security metrics, vulnerability intake, and engineering investment priorities.
- Drive scalable coverage across SAST, SCA, DAST, secrets scanning, mobile application security testing, cloud security posture management, and emerging security capabilities.
- Assess exploitability and investigate high-risk application and cloud security issues involving authentication, authorization, tenant isolation, sensitive data, secrets, and exposed cloud resources.
- Develop AI and automation capabilities for vulnerability triage, false-positive reduction, penetration-test analysis, prioritization, and detection-gap discovery.
- Define trust boundaries and human validation controls for AI-assisted security decisions.
- Coordinate bug-bounty and customer penetration-testing workflows and produce clear, evidence-based security findings and responses.
- Partner with Product Security, Security Architecture, Security Development, Security Operations, Penetration Testing, DevOps, engineering, product, and customer-facing teams to establish preventive controls and long-term security priorities.
Requirements
- 10+ years of relevant experience in application security, product security, penetration testing, vulnerability management, cloud security, or related security engineering, with recent depth in web and API security.
- Expertise assessing real-world exploitability involving authorization, authentication, injection, SSRF, business logic abuse, sensitive data exposure, and multi-tenant isolation.
- Experience implementing, configuring, or tuning SAST, SCA, DAST, secrets scanning, mobile application security testing, or cloud security posture management capabilities.
- Experience building or materially expanding security detection capabilities and automation while balancing coverage, false positives, cost, and human oversight.
- Strong understanding of cloud-hosted, multi-tenant architectures, attack paths, trust boundaries, identity, authorization, data isolation, and externally exposed services.
- Strong cloud security experience, preferably with AWS; transferable experience with Microsoft Azure or Google Cloud Platform is also relevant.
- Technical leadership experience through team leadership, mentoring, complex initiatives, or setting direction across multiple contributors.
- Strong written and verbal communication, collaboration, discretion, and ability to explain security findings and remediation to technical, leadership, customer-facing, and non-specialist audiences.
- Preferred qualifications include OWASP API Security Top 10 or OWASP Web Security Testing Guide familiarity; secure SDLC, CI/CD security integration, threat modeling, secure design review, or security architecture experience; AI or LLM-assisted security workflow experience; Android or iOS security depth; software supply-chain security; SOC 2, PCI DSS, FedRAMP, or HIPAA familiarity; proficiency with Python, TypeScript, Bash, Go, or another suitable programming language; distributed SaaS security experience; and bug-bounty, penetration-testing, vulnerability-disclosure, or remediation workflow experience.
Benefits
- Flexible-first working culture with global flexible ways of working.
- Mentorship, learning programs, leadership development, and education support.
- Paid volunteer time, August Free Fridays, well-being resources, and regionally tailored programs for employees and families.
- Genesys is Great Place to Work certified in 17 countries.
- The interview process typically includes a Zoom interview, meetings with the hiring manager and interview team, and no more than five interviews in most cases.
Tech Stack
Categories
About Genesys
Genesys builds cloud contact center and customer experience software used by enterprises to manage voice and digital interactions, self-service, and workforce engagement. Its Genesys Cloud platform and related tools are sold as subscription services (CCaaS) with AI for routing, automation, and analytics. The company serves more than 8,000 organizations worldwide and is headquartered in Menlo Park, California.