Penetration Tester – Product Security (Remote, Ireland)

About the role

Genesys Cloud Product Security is looking for a hands‑on Penetration Tester to protect our multi‑tenant SaaS platform. Working remotely from Ireland, you will focus on offensive security testing of web and mobile applications, public APIs, and supporting cloud infrastructure.

Key responsibilities

• Conduct manual penetration testing on web apps, APIs, and cloud infrastructure, identifying authentication, tenant isolation, input validation, business logic, and data exposure issues.
• Develop clear proof‑of‑concept exploits, validate findings, and retest remediations.
• Own the end‑to‑end bug bounty program: define scope, set policies, manage researcher engagement, triage submissions, and track remediation.
• Assess attack paths in a multi‑tenant AWS environment, understand trust boundaries, and evaluate API usage and access controls.
• Leverage AI‑assisted workflows to enhance testing efficiency and evaluate AI‑enabled features for risks such as prompt injection and data leakage.
• Collaborate closely with engineering teams to provide actionable remediation guidance and produce high‑quality security reports.

Required profile

• Approximately 3+ years of experience in penetration testing, application or product security.
• Strong curiosity and a solid foundation in web and API security fundamentals.
• Ability to work independently and deliver meaningful assessments in a fast‑moving cloud environment.

Required skills

• AWS cloud platform knowledge.
• Web application security testing.
• API security testing.
• Bug bounty program management.
• Experience with AI‑assisted security workflows (a plus).