Genesys Security Team

Open security roles at Genesys, and what we know about the team behind them.

information technology & services · 8500 employees · 3 open roles. Updated October 15, 2026.

Open roles (3)

Genesys

“Genesys publicly states a secure-by-design, SDLC-integrated approach with threat modeling, peer code reviews, OWASP...”

Genesys

“Genesys publicly states a secure-by-design, SDLC-integrated approach with threat modeling, peer code reviews, OWASP...”

Genesys

“Genesys publicly states a secure-by-design, SDLC-integrated approach with threat modeling, peer code reviews, OWASP...”

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

Genesys publicly states a secure-by-design, SDLC-integrated approach with threat modeling, peer code reviews, OWASP testing, and ongoing application scanning.
Public content emphasizes embedding security into development (secure-by-design, mandatory peer code reviews) rather than explicit gating language.
Genesys documents a risk-based vulnerability management program, routine automated scanning, and annual third-party penetration testing.

The team

Shahzad Ahmad is listed as Global Vice President Security, Privacy and Compliance.
Jonathan Chow is identified as Chief Information Security Officer at Genesys.
The Genesys leadership page lists CIO Trevor Schulze but does not list a CISO.
No reliable, public headcount for an AppSec team was extractable, and active AppSec job postings could not be programmatically enumerated.

What they're working on

Genesys integrates security into every stage of the SDLC, applying threat modeling and security-focused design reviews in the design stage.
Development teams use secure coding techniques and mandatory peer code reviews.
Before release, code is tested against security standards like the OWASP Top 10.
They conduct continuous vulnerability scanning, penetration tests, and pre-deployment checks.
Critical and high-risk vulnerabilities are promptly addressed, and annual vulnerability assessments and penetration testing engagements are conducted.
There is no explicit Security Champions program structure or ownership publicly available.