Be the one building AI-powered experiences where they matter most.
At Genesys, we help organizations create better customer experiences through AI-powered experience orchestration. Our platform connects people, systems, data and AI to help organizations deliver more personalized service, improve operational efficiency and build stronger customer relationships.
Help build, support and operate technology used by more than 8,000 organizations in over 100 countries – moving AI from possibility to production in real-world enterprise environments every day.
Role Overview:
Protecting a continuously evolving, multi-tenant SaaS platform requires security decisions that distinguish genuine customer risk from an increasing volume of automated findings. As a Principal Cloud Application Security Engineer in Genesys Cloud Product Security , you will shape how application security scales across cloud accounts, regions, APIs, applications, distributed services, software supply chains, and AI-powered product capabilities.
You will own the technical direction of a small Application Security team while remaining hands-on with complex security analysis, detection engineering, vulnerability triage, and cloud security. Your work will determine where security coverage needs to deepen, which findings represent meaningful exploitability, and how specialist engineering capacity is focused on risks that could affect customer data, tenant isolation, platform integrity, or service security.
AI-assisted development and security analysis are changing both the speed of software delivery and the volume of potential vulnerabilities that security teams must evaluate. You will define how Genesys uses AI and automation to improve vulnerability triage, identify gaps across source code and security tooling, reduce false positives, and establish appropriate human validation for security decisions where context and judgment remain essential.
Genesys Cloud primarily runs on AWS, and you will apply deep cloud security expertise to reason across identity, attack paths, infrastructure exposure, application behavior, and distributed architectures at enterprise scale. This Principal-level individual contributor role provides visibility across enterprise security initiatives, close partnership with engineering and senior leaders, and the opportunity to influence how application and cloud security capabilities evolve as the Genesys Cloud platform and its AI capabilities expand.
Key Responsibilities:
Lead the technical direction of a small Application Security team, strengthening engineering judgment, security standards, and team capability through hands-on leadership and mentoring
Own the end-to-end application security operating model, directing how detection coverage evolves, how increasing finding volume is absorbed, and where engineering investment delivers the greatest reduction in exploitable risk
Drive scalable detection coverage across SAST, SCA, DAST, secrets scanning, mobile application security testing, cloud security posture management, and emerging security capabilities, partnering with security teams to shape tool selection, configuration, tuning, and rule sets
Expand security visibility across web applications, APIs, mobile applications, cloud environments, AI-powered product capabilities, and software supply chains to identify systemic risks and coverage gaps that individual tools cannot reveal
Establish meaningful security coverage metrics that demonstrate both what testing discovers and how effectively the relevant application and platform attack surface is assessed
Own exploitability assessment across automated findings, bug bounty submissions, customer penetration tests, internal assessments, and AI-generated analysis, evaluating reachability, tenant isolation, customer data exposure, affected assets, and blast radius
Drive consistent and defensible vulnerability decisions through evidence, reproduction, severity rationale, triage runbooks, validation…