Security Engineer II

Responsibilities

• Perform manual and automated penetration testing of web applications, APIs, cloud-based systems, and AI/ML models
• Conduct security assessments of AI-driven features, focusing on risks like prompt injection and data leakage
• Lead or participate in incident response, including detection, containment, and post-incident reviews
• Conduct security investigations to identify root causes and attack paths
• Analyze logs, telemetry, and forensic artifacts for threat hunting
• Triage and prioritize findings from penetration tests
• Work with engineering teams to recommend remediations and verify fixes
• Perform threat modeling using frameworks like STRIDE
• Research emerging threats and the evolving AI threat landscape

Requirements

• Strong knowledge of application and systems security
• Solid understanding of web technologies, networking, and attack vectors
• Practical experience with penetration testing tools and techniques
• Experience with OWASP Top 10 for LLMs and AI exploitation patterns
• Experience conducting security investigations and incident response
• Proficiency in Linux/Unix
• Scripting or coding experience in Python, Ruby, or Java
• Excellent written and verbal communication skills in English

Preferred Qualifications

• Experience testing cloud-native environments, especially AWS
• Familiarity with microservices architectures and API security
• Exposure to DAST, SAST, or IAST tools
• Experience with application architecture security reviews
• Familiarity with security standards like ISO 27001, NIST, or CIS
• Relevant certifications such as OSCP, OSWE, GSEC, GCIA, CISSP, or CISM
• Familiarity with Git, Ruby, Kotlin, RabbitMQ, Redis, MongoDB, or PostgreSQL

About the Company

Talkdesk is pioneering a new era of Customer Experience Automation (CXA), redefining how the world’s most admired brands interact with their customers through AI. Recognized as a Leader in the Gartner® Magic Quadrant™ for Contact Center as a Service (CCaaS), Talkdesk builds AI-first solutions that put empathy, trust, and transparency at the center of every interaction.