Senior Security Engineer, Zoom
$124-271.2k
+ Bonus and equity value
Work platform for human connection
Open for applications
Work platform for human connection
1001+ employees
Open for applications
$124-271.2k
+ Bonus and equity value
1001+ employees
Company mission
To help people connect, collaborate, and get more work done, together.
Role
Who you are
- The ideal candidate brings broad technical expertise and hands-on experience in end-to-end product security
- Have obtained a Bachelor's in Computer Science, Information Science, Cyber Security, Computer or Electrical Engineering (or similar field), and 8+ years in security
- Have extensive experience in security testing across various environments. This includes assessing the security posture of web applications, native applications, distributed systems, and cloud infrastructure such as AWS. It also includes a focus on securing infrastructure, deployments, and core platform services
- Possess a solid understanding of software security architecture, design, threat modeling, secure code review, cryptography, and the SDLC. Able to clearly communicate best practices and effective mitigations for application security, particularly SDLC exceptions
- Have hands on security experience working with AWS and common service components within AWS. Ability to identify security gaps in the overall design as well as configuration issues in individual components
- Have in-depth knowledge of network based, system level, and application layer attacks and mitigation methods
- Have good knowledge of technology and security topics including network and application security (OWASP), infrastructure hardening, security baselines, web server, database security and applied cryptography
- Have good development experience in one or more of the programming languages and platforms such as Java is required
- Have the ability to speak Mandarin would be an advantage, but it’s not an expectation
What the job involves
- The Security Engineer is responsible for security design and reviews across our products and services, with a specific focus on Platform services and core infrastructure components
- In this role, you’ll collaborate with engineering teams, primarily those focused on Platform services, to design, implement, and validate secure solutions
- You’ll serve as a trusted security advisor, guiding architecture and reviewing implementation, particularly for new features or security enhancements
- This is a unique opportunity to work with cutting-edge cloud and security technologies while making a direct impact on Zoom’s platform
- The Security Architecture team is dedicated to ensuring Zoom releases and deploys secure products
- We work with diverse engineering, compliance, and DevOps teams across the organization to meet security goals and maintain compliance with established SLAs. Focusing on platform-level security, SDLC compliance, and core services
- Being a security subject-matter expert, guide engineering teams in end-to-end secure system design and implementation, with a focus on Platform services and its associated components
- Conducting threat modeling, architecture review, security code review, security assessment, and security testing (web application, native application, web services, cloud-based services, and infrastructure assessments)
- Performing cloud infrastructure reviews from a security perspective; the primary focus will be on AWS permissions and configuration issues within components like IAM and S3. This is especially important in the context of Platform services
- Performing an in-depth security review of new Zoom features and functionalities. This includes identifying security vulnerabilities such as those in the OWASP Top Ten, common issues from the NVD, and risks like RCE. It also involves reviewing Java or Python code and verifying security posture through manual and automated testing using tools like Burp Suite and Coverity
- Identifying gaps in existing cloud security architecture design/configuration, recommend changes or enhancements (authentication, authorization, network segmentation, container configuration, bastion host setup, etc.)
- Providing hands on security training and secure coding best practices to engineering teams
Application process
- End Date: December 24, 2025
Our take
Zoom reworked video conferencing when most people assumed it was a solved problem, with services from Cisco and Skype already ubiquitous in workplaces and homes. However, its videoconferencing infrastructure was simpler to use, faster and more flexible than any previous solution, and it swiftly took the world by storm.
Its success bred competition, however, and companies such as Microsoft and Google, along with numerous smaller communications firms, have begun making inroads on Zoom's formerly commanding lead. Additionally, as workplaces are mostly adopting a hybrid or flexible working strategy, some of its importance as a workplace tool is wearing off and it is recording a gradual decline in daily usage rates.
To counter these trends, Zoom is expanding its business offerings through product development and strategic acquisitions. Alongside many other large tech companies, it has battled through a difficult economic situation, but it nonetheless remains a profitable company and household name. Plus, its track record of innovation means it is still very much one to watch in the communications space.
Freddie
Company Specialist at Welcome to the Jungle
Insights
7% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Jan 2017
$100m
SERIES D
Feb 2015
$30m
SERIES C
Total funding: $148.5m
Company benefits
- Work from home opportunities
- Retirement benefits
- My-Time-Off (MTO), an extended vacation policy
- Employee Stock Purchase Plan (ESPP) and Restricted Stock Unit (RSU) Equity Program plus Yearly stock grant for all employees
- Wellness and fitness reimbursement, wellness resources, Thrive Global wellness app, TaskHuman wellness coaching app
- Employee Assistance Program (EAP) including emotional support, financial resources and legal guidance
- Paid Parental Leave (both parents) 16 weeks paid leave (or statutory if more generous)
- Employer Matching of Charitable contributions up to $500 USD equivalent/year
- Annual Zoom Store Allowance
- Business Travel Accident Insurance
Company HQ
Downtown San Jose, San Jose, CA
Leadership
Eric Yuan
(CEO & Founder)Previously VP Engineering at Cisco and WebEx.
Share this job
View 30 more jobs at Zoom