Security Engineer, Zoom

$211.3-271.2k

In addition to the base salary and/or OTE listed Zoom has a Total Direct Compensation philosophy that takes into consideration; base salary, bonus and equity value

AWS

JavaScript

Python

Java

Linux

C++

Zoom

Kali

Mid and Senior level

San Francisco Bay Area

More information about location

Office located in San Jose, CA

Work platform for human connection

Job no longer available

Work platform for human connection

1001+ employees

B2CB2BCommunicationTelecommunicationsVideo

Job no longer available

$211.3-271.2k

In addition to the base salary and/or OTE listed Zoom has a Total Direct Compensation philosophy that takes into consideration; base salary, bonus and equity value

AWS

JavaScript

Python

Java

Linux

C++

Zoom

Kali

Mid and Senior level

San Francisco Bay Area

More information about location

Office located in San Jose, CA

1001+ employees

B2CB2BCommunicationTelecommunicationsVideo

Company mission

To help people connect, collaborate, and get more work done, together.

Job

Company

Role

Who you are

Requires a Bachelor’s degree in Computer Science, Information Science, Cyber Security, Computer Engineering, Electrical Engineering, a related field, or a foreign equivalent
Must have 4 years of experience in job offered or related occupation
Must have 4 years of experience in Software security architecture and design, threat modeling, security code review, SDLC, and best practices and mitigations for application security
Must have 4 years of experience in identifying security gaps in the design and configuration issues in individual components
Must have 4 years of experience in network-based, system level, an application layer attacks and mitigation methods
Must have 4 years of experience in security technologies including VPC, IAM, KMS, etc. in AWS
Must have 4 years of experience in technology and security including network and application security (OWASP), infrastructure hardening, security baselines, web server, and database security; and
Must have 4 years of experience in development in programming languages such as Java, JavaScript, Python, or Go
Telecommuting work arrangement permitted: position may work in various unanticipated locations throughout the U.S

What the job involves

Conduct threat modeling, architecture review, security code review, security assessment, penetration testing (web application, native application, web services, cloud-based services, and infrastructure assessments)
Perform cloud infrastructure review from a security perspective; the primary focus will be on AWS and many of its common service components such as S3, IAM, EC2, VPC
Perform in-depth security review of new Zoom features. This includes identifying security vulnerabilities (OWASP top ten, common issues in NVD, RCE), reviewing code in Java or C++, verifying security posture through pen-test (using manual/automated techniques with tools like Kali Linux, Burp suite, Checkmarx, WebInspect)
Identify gaps in existing cloud security architecture design/configuration and recommend changes (authentication, authorization, network segmentation, container configuration, bastion host setup)
Partner with engineering and operation teams to integrate mitigation controls into continuous integration, delivery and deployment processes
Work on essential areas to develop security baseline for cloud, container, and application and integrate it into the CI/CD pipeline; and
Implement security architecture, methods, and controls required to meet security, compliance, and audit requirements (NIST controls, SOC2)

Our take

Zoom reworked video conferencing when most people assumed it was a solved problem, with services from Cisco and Skype already ubiquitous in workplaces and homes. However, its videoconferencing infrastructure was simpler to use, faster and more flexible than any previous solution, and it swiftly took the world by storm.

Its success bred competition, however, and companies such as Microsoft and Google, along with numerous smaller communications firms, have begun making inroads on Zoom's formerly commanding lead. Additionally, as workplaces are mostly adopting a hybrid or flexible working strategy, some of its importance as a workplace tool is wearing off and it is recording a gradual decline in daily usage rates.

To counter these trends, Zoom is expanding its business offerings through product development and strategic acquisitions. Alongside many other large tech companies, it has battled through a difficult economic situation, but it nonetheless remains a profitable company and household name. Plus, its track record of innovation means it is still very much one to watch in the communications space.

Freddie

Company Specialist at Welcome to the Jungle

Insights

Top investors

7% employee growth in 12 months

Glassdoor (3.6)

Trustpilot (1.3)

Company

Funding (last 2 of 5 rounds)

Jan 2017

$100m

SERIES D

Feb 2015

$30m

SERIES C

Total funding: $148.5m

Company benefits

Work from home opportunities
Retirement benefits
My-Time-Off (MTO), an extended vacation policy
Employee Stock Purchase Plan (ESPP) and Restricted Stock Unit (RSU) Equity Program plus Yearly stock grant for all employees
Wellness and fitness reimbursement, wellness resources, Thrive Global wellness app, TaskHuman wellness coaching app
Employee Assistance Program (EAP) including emotional support, financial resources and legal guidance
Paid Parental Leave (both parents) 16 weeks paid leave (or statutory if more generous)
Employer Matching of Charitable contributions up to $500 USD equivalent/year
Annual Zoom Store Allowance
Business Travel Accident Insurance

Company HQ

Downtown San Jose, San Jose, CA

Leadership

Eric Yuan

(CEO & Founder)

Previously VP Engineering at Cisco and WebEx.

Salary benchmarks

We don't have enough data yet to provide salary benchmarks for this role.

Submit your salary to help other candidates with crowdsourced salary estimates.

Share this job

View 26 more jobs at Zoom