{"id":1015124,"url":"https://alion.io/job/genesys-principal-cloud-application-security-engineer","title":"Principal Cloud Application Security Engineer","company":{"id":660,"name":"Genesys","domain":"genesys.com","url":"https://alion.io/company/genesys","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":25,"ghost_share":0.04,"stale_share":0.4,"repost_share":0.08,"time_to_fill_p50_days":23,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ireland"],"countries":["IE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":194000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AI Agents","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"FedRAMP","optional":true},{"name":"GCP","optional":true},{"name":"HIPAA","optional":true},{"name":"LLM","optional":true},{"name":"OWASP","optional":true},{"name":"PCI DSS","optional":true},{"name":"Python","optional":true},{"name":"Rest API","optional":true},{"name":"SBOM","optional":true},{"name":"SOC 2","optional":true},{"name":"Threat Modeling","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-09-17T22:40:47Z","employer_posted_date":"2026-09-17","last_verified_at":"2026-11-04T00:33:19Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":47},"description":"Be the one building AI-powered experiences where they matter most.\nAt Genesys, we help organizations create better customer experiences through AI-powered experience orchestration. Our platform connects people, systems, data and AI to help organizations deliver more personalized service, improve operational efficiency and build stronger customer relationships.\nHelp build, support and operate technology used by more than 8,000 organizations in over 100 countries - moving AI from possibility to production in real-world enterprise environments every day.\nRole Overview:\nProtecting a continuously evolving, multi-tenant SaaS platform requires security decisions that distinguish genuine customer risk from an increasing volume of automated findings. As a Principal Cloud Application Security Engineer in Genesys Cloud Product Security, you will shape how application security scales across cloud accounts, regions, APIs, applications, distributed services, software supply chains, and AI-powered product capabilities.\nYou will own the technical direction of a small Application Security team while remaining hands-on with complex security analysis, detection engineering, vulnerability triage, and cloud security. Your work will determine where security coverage needs to deepen, which findings represent meaningful exploitability, and how specialist engineering capacity is focused on risks that could affect customer data, tenant isolation, platform integrity, or service security.\nAI-assisted development and security analysis are changing both the speed of software delivery and the volume of potential vulnerabilities that security teams must evaluate. You will define how Genesys uses AI and automation to improve vulnerability triage, identify gaps across source code and security tooling, reduce false positives, and establish appropriate human validation for security decisions where context and judgment remain essential.\nGenesys Cloud primarily runs on AWS, and you will apply deep cloud security expertise to reason across identity, attack paths, infrastructure exposure, application behavior, and distributed architectures at enterprise scale. This Principal-level individual contributor role provides visibility across enterprise security initiatives, close partnership with engineering and senior leaders, and the opportunity to influence how application and cloud security capabilities evolve as the Genesys Cloud platform and its AI capabilities expand.\nKey Responsibilities:\nLead the technical direction of a small Application Security team, strengthening engineering judgment, security standards, and team capability through hands-on leadership and mentoring\n\nOwn the end-to-end application security operating model, directing how detection coverage evolves, how increasing finding volume is absorbed, and where engineering investment delivers the greatest reduction in exploitable risk\n\nDrive scalable detection coverage across SAST, SCA, DAST, secrets scanning, mobile application security testing, cloud security posture management, and emerging security capabilities, partnering with security teams to shape tool selection, configuration, tuning, and rule sets\n\nExpand security visibility across web applications, APIs, mobile applications, cloud environments, AI-powered product capabilities, and software supply chains to identify systemic risks and coverage gaps that individual tools cannot reveal\n\nEstablish meaningful security coverage metrics that demonstrate both what testing discovers and how effectively the relevant application and platform attack surface is assessed\n\nOwn exploitability assessment across automated findings, bug bounty submissions, customer penetration tests, internal assessments, and AI-generated analysis, evaluating reachability, tenant isolation, customer data exposure, affected assets, and blast radius\n\nDrive consistent and defensible vulnerability decisions through evidence, reproduction, severity rationale, triage runbooks, validation checklists, and known-issue patterns that separate exploitable vulnerabilities from false positives, duplicates, theoretical findings, and accepted risk\n\nLead investigation and escalation of high-risk application and cloud security issues, including cross-tenant access, authentication and authorization bypass, sensitive data exposure, production secrets, and externally reachable cloud resources\n\nDevelop AI and automation capabilities that increase security team capacity by improving vulnerability triage, analyzing penetration-test-style reports, identifying false positives, drafting responses, prioritizing findings requiring specialist judgment, and exposing detection gaps across tools and source code\n\nDefine appropriate trust boundaries for AI-assisted security decisions, establishing human validation points and evolving those controls as models, security tooling, attack techniques, and engineering practices change\n\nStrengthen vulnerability intake and tracking across security tools, bug bounty submissions, customer penetration tests, internal assessments, and other detection sources to improve consistency, traceability, and scalability\n\nCoordinate the bug bounty program and customer penetration testing workflows, partnering with Sales, Technical Account Managers, Customer Success Managers, penetration testers, and product teams to validate, communicate, and route security findings effectively\n\nProduce clear, evidence-based security findings, severity decisions, and reusable customer responses that engineering teams, account teams, and customer security stakeholders can act on without additional interpretation\n\nPartner across Product Security, Security Architecture, Security Development, Security Operations, Penetration Testing, DevOps, engineering, and product teams to convert recurring vulnerabilities and security anti-patterns into scalable preventive controls\n\nInfluence application security strategy across Genesys Cloud by connecting individual findings, systemic weaknesses, detection gaps, and emerging attack techniques to longer-term platform security priorities\n\nRequired Qualifications:\n10+ years of relevant experience across application security, product security, penetration testing, vulnerability management, cloud security, or closely related security engineering disciplines, including significant recent depth in web and API security\n\nDemonstrated expertise assessing real-world exploitability across authorization flaws, authentication weaknesses, injection vulnerabilities, SSRF, business logic abuse, sensitive data exposure, and multi-tenant isolation risks\n\nStrong experience implementing, configuring, or tuning application security capabilities such as SAST, SCA, DAST, secrets scanning, mobile application security testing, or cloud security posture management\n\nProven experience building or materially expanding security detection capabilities, with sound judgment across coverage depth, false positives, operational cost, engineering effort, and security trade-offs\n\nDemonstrated success building automation that improved security team capacity, consistency, coverage, or triage efficiency, combined with the judgment to identify where automated decisions require human oversight\n\nStrong understanding of cloud-hosted, multi-tenant architectures and the ability to reason about attack paths, trust boundaries, identity, authorization, data isolation, and externally exposed services\n\nStrong cloud security experience, preferably with AWS, including security controls, identity, attack paths, infrastructure exposure, and security posture across large-scale cloud environments\n\nDemonstrated technical leadership through formal or informal leadership of a small team, mentoring security engineers, leading complex initiatives, or setting technical direction across multiple contributors\n\nStrong written and verbal communication skills, with the ability to explain exploitability, severity, security findings, and remediation considerations to engineering, product, senior leadership, customer-facing teams, and non-specialist audiences\n\nProven ability to collaborate across shared areas of ownership with security, engineering, DevOps, and product teams while maintaining clear accountability and productive working relationships\n\nDemonstrated discretion when handling sensitive vulnerability information, customer security findings, researcher communications, and confidential security data\n\nPreferred Qualifications:\nDeep cloud security experience with AWS, or transferable cloud security expertise gained in Microsoft Azure or Google Cloud Platform (GCP)\n\nFamiliarity with OWASP API Security Top 10, OWASP Web Security Testing Guide, or established mobile application security testing practices\n\nExperience with secure SDLC practices, CI/CD security integration, threat modeling, secure design review, or security architecture\n\nExperience designing, building, or operating AI or LLM-assisted security and engineering workflows\n\nHands-on depth in Android or iOS application security or cloud security posture management across large-scale distributed environments\n\nExperience with software supply chain security, including dependency risk, malicious package detection, software bills of materials (SBOM), build integrity, or provenance\n\nFamiliarity with security and compliance frameworks such as SOC 2, PCI DSS, FedRAMP, or HIPAA and their implications for security evidence and engineering controls\n\nProficiency with Python, TypeScript, Bash, Go, or another language suitable for developing security tooling, integrations, and automation\n\nExperience securing REST APIs, OAuth-based architectures, service-to-service integrations, event-driven systems, microservices, or other distributed SaaS architectures\n\nExperience working with bug bounty programs, customer penetration testing, vulnerability disclosure, or remediation workflows\n\nWe know strong candidates may not meet every item listed above. We will consider candidates with strong application and API security judgment, a record of building capability rather than operating it, and the appetite to scale a security function with automation rather than headcount.\nWorking at Genesys\nAI at enterprise scale - Build, support and operate AI-powered technology used by more than 8,000 organizations worldwide. 150+ new AI features were released in the last fiscal year.\nA flexible-first culture - Join a global team of nearly 7,000 employees with flexible ways of working designed to help people do their best work.\nGrowth in the AI era - Build future-ready skills through mentorship, learning programs, leadership development and education support.\nTime to recharge and give back - Benefits include paid volunteer time, August Free Fridays, well-being resources and regionally tailored programs for employees and their families.\nRecognized globally - Genesys is Great Place to Work® certified in 17 countries and 94% of employees are proud to tell others they work at Genesys.\nLearn more about our culture, AI innovation and sustainability commitments through our Careers site and Sustainability Report.\nWhat Happens After You Apply\nAfter you apply, here's what you can typically expect:\nOur Talent Acquisition team reviews your application with the hiring team.\nA Talent Acquisition Partner will review your application and, if your background is aligned, schedule a Zoom interview. \nNext, you'll meet the hiring manager and other members of the interview team.\nWe aim to keep the process focused and respectful of your time, with no more than five interviews in most cases.\nAfter interviews are complete, our team will follow up with the final steps.\nEvery application is reviewed by a person. Response times may vary by role and location, but our team will keep you informed throughout the process.\nStay Connected\nStay connected to learn more about how we're applying AI to customer and employee experience challenges and get notified when relevant opportunities become availab...","description_format":"text","description_chars":14009,"description_truncated":true,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Unified Communications","Conversational AI","Customer Support & Help Desk Software"],"lifecycle":[{"event":"open","at":"2026-09-17T22:40:47Z"}],"visa":[],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.715,"p_room":0.28,"age_days":46,"expected_fill_days":23,"reasons":["conf:1","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/genesys-principal-cloud-application-security-engineer","json_url":"https://alion.io/job/genesys-principal-cloud-application-security-engineer.json","meta":{"generated_at":"2026-11-04T02:26:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3704,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":660},"rest":"https://alion.io/mcp/rest/get_company?id=660"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgenesys-principal-cloud-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgenesys-principal-cloud-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgenesys-principal-cloud-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/genesys-principal-cloud-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgenesys-principal-cloud-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1015124}},{"tool":"search_jobs","arguments":{"company":"genesys.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1015124},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}