Security Engineer: Pen Testing, IR & Investigations

Talkdesk, Inc.; Portugal; Teletrabalho; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

Talkdesk, Inc. is seeking a Security Engineer specializing in pentesting, incident response, and investigations in Portugal.

You will detect, investigate, and prevent security incidents while proactively identifying weaknesses across Talkdesk platforms and applications. You will engage with engineering teams to explain vulnerabilities and drive remediation, while contributing to threat modelling and playbook improvements.

Qualificações

• Strong knowledge of application and systems security.
• Solid understanding of web technologies, networking, and common attack vectors.
• Practical experience with penetration testing tools and techniques.
• Experience with the OWASP Top 10 for LLMs and AI exploitation patterns.
• Experience conducting security investigations and incident response.

Responsabilidades

• Perform manual and automated penetration testing of web apps, APIs, cloud systems, and AI/ML models.
• Conduct security assessments of AI-driven features focusing on prompt injection and data leakage.
• Lead or participate in incident response activities: detection, containment, eradication, post-incident reviews.
• Analyze logs and forensics to support investigations and threat hunting.
• Explain vulnerabilities to engineers and verify fixes.
• Develop and improve incident response playbooks and processes.
• Perform threat modeling to identify realistic attack scenarios.

Conhecimentos

Application security

System security

Web technologies

Networking

Penetration testing

Incident response

Threat modeling

Scripting (Python/Java/Ruby)

Communication skills

English fluency

Formação académica

Bachelor's degree in CS/IS or related field

Ferramentas

DAST tools

SAST tools

IAST tools

Descrição da oferta de emprego

Talkdesk, Inc. is seeking a Security Engineer specializing in pentesting, incident response, and investigations in Portugal.

You will detect, investigate, and prevent security incidents while proactively identifying weaknesses across Talkdesk platforms and applications. You will engage with engineering teams to explain vulnerabilities and drive remediation, while contributing to threat modelling and playbook improvements.