Security Engineer

Security Engineer (Security Architecture)

You’ll be responsible for security design and reviews across Zoom’s products and services, partnering with engineering teams to design, implement, and validate secure solutions.

Responsibilities

• Guide engineering teams through end-to-end secure system design and implementation
• Perform threat modeling, architecture reviews, security code reviews, security assessments, and security testing across:
  • Web applications, native applications
  • Web services and cloud-based services
  • Infrastructure assessments
• Conduct security reviews of cloud infrastructure, with a focus on AWS permissions and configuration (e.g., IAM and S3)
• Perform in-depth security reviews for new Zoom features and enhancements, including:
  • OWASP Top Ten issues, NVD-driven common vulnerabilities, and risks such as RCE
  • Java/Python code review and validation via manual and automated testing
• Use tools such as Burp Suite and Coverity for security posture verification
• Identify and recommend improvements to cloud security architecture and configuration gaps, including:
  • Authentication/authorization
  • Network segmentation
  • Container configuration
  • Bastion host setup
• Provide hands-on security training and secure coding best practices to engineering teams

Requirements

• Bachelor’s degree in a relevant field (or equivalent experience)
• 5+ years of security experience
• Strong security testing experience across web, native, distributed systems, and cloud infrastructure (AWS)
• Solid foundation in software security architecture, design, threat modeling, secure code review, cryptography, and the SDLC
• Ability to communicate application security best practices and mitigations, including handling SDLC exceptions
• Hands-on AWS security experience and knowledge of common AWS service components
• Strong knowledge of network-, system-, and application-layer attack patterns and mitigations
• Knowledge of network and application security (OWASP), infrastructure hardening, security baselines, database security, and applied cryptography
• Development experience in one or more of: Java (required), and/or Python

Salary

• Minimum: $98,900/year
• Maximum: $228,700/year
• Total Direct Compensation may include base salary, bonus, and equity; starting pay depends on qualifications and experience, with location-based compensation considerations.