Security Engineer

Stack

Responsibilities

• ▹Guide engineering teams in end-to-end secure system design and implementation
• ▹Conduct threat modeling, architecture review, security code review, and security testing
• ▹Review cloud infrastructure security, primarily AWS permissions and configuration (IAM, S3)
• ▹Perform in-depth security reviews of new Zoom features, identifying vulnerabilities (OWASP Top Ten, NVD, RCE)
• ▹Review Java or Python code and verify security posture using tools like Burp Suite and Coverity
• ▹Identify gaps in cloud security architecture and recommend enhancements
• ▹Provide hands-on security training and secure coding best practices

Requirements

• ▹Bachelor's degree in Computer Science, Information Science, Cyber Security, Computer or Electrical Engineering (or equivalent experience), plus 5+ years of security experience
• ▹Extensive security testing experience across web applications, native applications, distributed systems, and cloud infrastructure (AWS)
• ▹Solid understanding of software security architecture, threat modeling, secure code review, and cryptography
• ▹Hands-on AWS security experience
• ▹In-depth knowledge of network, system, and application-layer attacks and mitigations
• ▹Development experience in at least one programming language/platform (Java required)

Soft skills

What we offer

• ▹Comprehensive benefits supporting physical, mental, emotional, and financial health
• ▹Hybrid, remote, or in-person work options depending on the role

About the company

Zoom builds the collaboration platform that helps people stay connected, including Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars.