Security Engineer, Zoom
$98.9-228.7k
+ Bonus + Equity
Work platform for human connection
Open for applications
Work platform for human connection
1001+ employees
Open for applications
$98.9-228.7k
+ Bonus + Equity
1001+ employees
Company mission
To help people connect, collaborate, and get more work done, together.
Role
Who you are
- 3+ years of experience with a Bachelor's in a related field. (Computer Science, Information Security, Computer Engineering)
- Prove experience working as a Security Engineer or in a similar role with a focus on security testing, container security, and SCA/SAST/DAST
- Demonstrate experience with container security tools, image scanning, and vulnerability management; knowledgeable in security principles, protocols, and standards like CIS benchmarks and OWASP Top 10
- Have experience with one or more of security tools such as Kali Linux, Burp, Checkmarx, Netsparker, Coverity, Prisma, etc
- Have analytical and problem-solving skills, with the ability to identify and mitigate security risks in complex environments
- Have communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and communicate technical concepts to non-technical stakeholders
- Be certified (e.g. Docker Certified Security Specialist, Certified Kubernetes Security Specialist)
- Have experience working with (IAST) - Interactive Apps Security Testing - (IRASP) - app self protection (security defense) fights back in real time
What the job involves
- As an Application Security Engineer, you will work with security testing automation and tools, focusing on Static Application Security Testing/Dynamic Application Security Testing implementation
- You'll develop security programs, guide teams on secure coding, and manage container security
- The role combines technical work (vulnerability assessment, security testing, automation) with cross-functional collaboration
- You'll communicate security recommendations and help modernize security processes through CI/CD integration, while working with advanced tools including AI solutions
- The security team specializes in application security engineering, focusing on automating security testing through SAST and DAST tools. They develop security programs, guide secure coding, and manage container security
- Their role blends technical tasks like vulnerability assessments and automation with cross-functional collaboration. A key focus is modernizing security through CI/CD integration and using advanced tools, including AI, to strengthen security practices
- Developing or employing 3rd party security test automation solutions for Containers, Software Composition Analysis, and (Static Application Security Testing) / (Dynamic Application Security Testing)
- Developing and enforcing security policies, procedures, and standards specific to container development and deployment
- Triaging and validating security vulnerabilities found or reported by security tools, communicate issues to the application owners, provide meaningful remediation recommendations, and validate their resolution
- Participating in manual security testing on web applications, web services, native and mobile applications while measuring coverage
- Identifying potential vulnerabilities (Open Web Application Security Project top 10, critical/high and common issues in National Vulnerability Database, etc.) and methods of improvement in security design or implementation
- Collaborating with development and operations teams to integrate security into the Continuous Integration/Continuous Deployment pipeline and automate security processes
- Developing tools or scripts to automate repetitive tasks to streamline security automation and integration with CI/CD processes
Application process
- End Date: January 2, 2026
Our take
Zoom reworked video conferencing when most people assumed it was a solved problem, with services from Cisco and Skype already ubiquitous in workplaces and homes. However, its videoconferencing infrastructure was simpler to use, faster and more flexible than any previous solution, and it swiftly took the world by storm.
Its success bred competition, however, and companies such as Microsoft and Google, along with numerous smaller communications firms, have begun making inroads on Zoom's formerly commanding lead. Additionally, as workplaces are mostly adopting a hybrid or flexible working strategy, some of its importance as a workplace tool is wearing off and it is recording a gradual decline in daily usage rates.
To counter these trends, Zoom is expanding its business offerings through product development and strategic acquisitions. Alongside many other large tech companies, it has battled through a difficult economic situation, but it nonetheless remains a profitable company and household name. Plus, its track record of innovation means it is still very much one to watch in the communications space.
Freddie
Company Specialist at Welcome to the Jungle
Insights
7% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Jan 2017
$100m
SERIES D
Feb 2015
$30m
SERIES C
Total funding: $148.5m
Company benefits
- Work from home opportunities
- Retirement benefits
- My-Time-Off (MTO), an extended vacation policy
- Employee Stock Purchase Plan (ESPP) and Restricted Stock Unit (RSU) Equity Program plus Yearly stock grant for all employees
- Wellness and fitness reimbursement, wellness resources, Thrive Global wellness app, TaskHuman wellness coaching app
- Employee Assistance Program (EAP) including emotional support, financial resources and legal guidance
- Paid Parental Leave (both parents) 16 weeks paid leave (or statutory if more generous)
- Employer Matching of Charitable contributions up to $500 USD equivalent/year
- Annual Zoom Store Allowance
- Business Travel Accident Insurance
Company HQ
Downtown San Jose, San Jose, CA
Leadership
Eric Yuan
(CEO & Founder)Previously VP Engineering at Cisco and WebEx.
Share this job
View 28 more jobs at Zoom