3 months ago
Portugal (city not specified)Senior
Responsibilities
- Perform manual and automated penetration testing of web applications, APIs, cloud-based systems, and AI/ML models.
- Assess AI-driven features for prompt injection, data leakage, adversarial attacks, and other security risks.
- Conduct security investigations, root-cause analysis, attack-path analysis, incident response, threat hunting, and forensic analysis.
- Triage, validate, and prioritize penetration-test findings and work with engineering teams to remediate and verify vulnerabilities.
- Develop and improve incident-response playbooks and processes, perform STRIDE threat modeling, and research emerging threats.
- Act as a security subject-matter expert during incidents and high-risk technical discussions.
Requirements
- Strong knowledge of application and systems security, web technologies, networking, common attack vectors, cryptographic concepts, and Linux/Unix.
- Practical experience with penetration testing, security investigations, incident response, log and security-event analysis, and OWASP risks including the OWASP Top 10 for LLMs.
- Experience with scripting or coding in at least one general-purpose language such as Python, Ruby, or Java.
- Strong written and verbal communication, analytical and critical-thinking skills, and fluency in written and spoken English.
- Preferred qualifications include AWS and cloud-native security experience, microservices and API security familiarity, web and mobile application security testing, DAST/SAST/IAST exposure, architecture security reviews, and familiarity with ISO 27001, NIST, CIS, OWASP, and SANS.
- Relevant certifications such as OSCP, OSWE, GSEC, GCIA, CISSP, or CISM and familiarity with Git, Ruby, Kotlin, RabbitMQ, Redis, MongoDB, or PostgreSQL are preferred.
Benefits
- Primarily office-environment work involving computer-based work and extended periods of sitting or standing.
- Inclusive and diverse workplace culture with community volunteering and environmental initiatives.
About Talkdesk
Talkdesk builds a cloud contact center (CCaaS) and customer experience automation platform for enterprises, combining voice, digital channels, and AI agents. Delivered as SaaS with integrations to CRM and ticketing tools, it offers routing, analytics, and workforce capabilities for service and sales teams across industries. Founded in 2011 and headquartered in San Francisco, it is privately held and serves customers worldwide.