Security Engineer

Responsibilities

• Perform manual and automated penetration testing of web applications, APIs, cloud-based systems, and AI/ML models
• Conduct security assessments of AI-driven features, focusing on risks like prompt injection and data leakage
• Lead or participate in incident response, including detection, containment, and post-incident reviews
• Conduct security investigations to identify root causes and attack paths
• Analyze logs, telemetry, and forensic artifacts for threat hunting
• Triage and prioritize findings from penetration tests and work with engineering to recommend remediations
• Perform threat modeling using frameworks like STRIDE
• Research emerging threats and exploitation methods in the AI landscape

Requirements

• Strong knowledge of application and systems security
• Solid understanding of web technologies, networking, and common attack vectors
• Practical experience with penetration testing tools and techniques
• Experience with OWASP Top 10 for LLMs and AI exploitation patterns
• Experience conducting security investigations and incident response
• Knowledge of cryptographic concepts
• Proficiency in Linux/Unix
• Experience analyzing logs and security events
• Scripting or coding experience in Python, Ruby, or Java
• Fluent in English

Preferred Qualifications

• Experience testing cloud-native environments, especially AWS
• Familiarity with microservices architectures and API security
• Experience with web and mobile application security testing
• Exposure to DAST, SAST, or IAST tools
• Familiarity with security standards like ISO 27001, NIST, or CIS
• Relevant certifications such as OSCP, OSWE, GSEC, GCIA, CISSP, or CISM
• Familiarity with Git, Ruby, Kotlin, RabbitMQ, Redis, MongoDB, or PostgreSQL

About the Company

Talkdesk is a leader in Customer Experience Automation (CXA), redefining how brands interact with customers through AI-first solutions. Recognized in the Gartner® Magic Quadrant™ for CCaaS, Talkdesk combines global stability with the agility of a disruptor.