Security Engineer, Zoom
Cloud
Work platform for human connection
Job no longer available
Work platform for human connection
1001+ employees
Job no longer available
1001+ employees
Company mission
To help people connect, collaborate, and get more work done, together.
Role
Who you are
- Have a deep understanding of Cloud security technologies in particular AWS, OCI and Cloudflare. Are very comfortable using AWS security tools and Cloud monitoring solutions. Expert knowledge of AWS
- Have good experience implementing Cloud security controls (focused on AWS services, APIs and Cloud Infrastructure), and good Cloud architecture experience. Additional bonus if you have Cloudflare expertise within their Security tooling, such as DDOS, WAF, Cloudflare One
- Have good experience in Cloud security, infrastructure as code, or related areas with a good understanding of Cloud security best practices and frameworks
- Have the ability to produce Architectural diagrams with a focus on the security control plane
- Have experience in application security, software development, or related areas with a good understanding of secure coding practices and application security frameworks
- Have proficiency in Cloud technologies and programming languages (such as AWS Services, Terraform, PHP, Go). Knowledge of security tools (e.g., AWS GuardDuty, Firewall Manager WAF, AWS Shield, AWS Identity Center, AWS IAM etc, ), and familiarity with Cloud security protocols
- Able to critically analyze Security Assessment reports from external partners and customers
- Able to critically evaluate Cloud security controls
- Have excellent attention to detail, a sense of curiosity and ability to focus, and are comfortable discussing the latest security technology. Written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences
What the job involves
- This role focuses on Cloud security for the Workvivo by Zoom platform, including the Web App, AWS Infrastructure, and Mobile App. You will implement and maintain Cloud security controls to protect these systems
- Your responsibilities include using Cloud security tools, reviewing configurations, conducting security assessments, and monitoring compliance. You will work closely with application, product, and infrastructure teams to integrate security best practices throughout development. You will also guide developers and promote security awareness
- Our tech stack includes AWS (Aurora MySQL), Laravel, PHP, GO, React, React Native, Redshift, Redis, and ElasticSearch. You don’t need to be an expert in all areas—we have specialists. Your focus is strengthening Cloud security, and over time, you should become comfortable with Laravel, PHP, and GO
- In this position, you’ll have the opportunity to make a meaningful impact on the security of both Workvivo and Zoom
- This includes contributing to our engineering security training program and collaborating cross-functionally within Zoom Security, including teams like Bug Bounty, Incident Response, SOC, Vulnerability Management, and Customer Security Assurance (CSA)
- Implementing Cloud security controls for the Workvivo Platform, including AWS Infrastructure and the Workvivo Application (Web App, Mobile App)
- Performing Cloud Security Assessments: Conduct ongoing Cloud configuration reviews, and security assessments to ensure proper Cloud security controls. Define Cloud architecture solutions for the Workvivo SaaS application
- Conducting Cloud architecture reviews and risk assessments to proactively identify potential risks and develop mitigation strategies. Design, develop, and implement Cloud security monitoring tools, frameworks, and methodologies
- Tracking, analyzing, and managing Cloud security controls, providing guidance and support for maintaining secure Cloud infrastructure
- Contributing to improving the SDLC such as implementing security controls, Cloud configuration management such as SAST, DAST, and, SCA. Contributing to improving security across Workvivo & Zoom, including feeding into the Engineering Security training program. Contribute
- Working cross functionally within Zoom Security, e.g. Bug Bounty, Incident Response, SOC, Vulnerability Management, Customer Security Assurance (CSA) etc. Introducing and coding automated security solutions
Application process
- End Date: March 21, 2025
Salary benchmarks
Our take
Zoom reworked video conferencing when most people assumed it was a solved problem, with services from Cisco and Skype already ubiquitous in workplaces and homes. However, its videoconferencing infrastructure was simpler to use, faster and more flexible than any previous solution, and it swiftly took the world by storm.
Its success bred competition, however, and companies such as Microsoft and Google, along with numerous smaller communications firms, have begun making inroads on Zoom's formerly commanding lead. Additionally, as workplaces are mostly adopting a hybrid or flexible working strategy, some of its importance as a workplace tool is wearing off and it is recording a gradual decline in daily usage rates.
To counter these trends, Zoom is expanding its business offerings through product development and strategic acquisitions. Alongside many other large tech companies, it has battled through a difficult economic situation, but it nonetheless remains a profitable company and household name. Plus, its track record of innovation means it is still very much one to watch in the communications space.
Freddie
Company Specialist at Welcome to the Jungle
Insights
7% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Jan 2017
$100m
SERIES D
Feb 2015
$30m
SERIES C
Total funding: $148.5m
Company benefits
- Work from home opportunities
- Retirement benefits
- My-Time-Off (MTO), an extended vacation policy
- Employee Stock Purchase Plan (ESPP) and Restricted Stock Unit (RSU) Equity Program plus Yearly stock grant for all employees
- Wellness and fitness reimbursement, wellness resources, Thrive Global wellness app, TaskHuman wellness coaching app
- Employee Assistance Program (EAP) including emotional support, financial resources and legal guidance
- Paid Parental Leave (both parents) 16 weeks paid leave (or statutory if more generous)
- Employer Matching of Charitable contributions up to $500 USD equivalent/year
- Annual Zoom Store Allowance
- Business Travel Accident Insurance
Company HQ
Downtown San Jose, San Jose, CA
Leadership
Eric Yuan
(CEO & Founder)Previously VP Engineering at Cisco and WebEx.
Share this job
View 59 more jobs at Zoom