Senior Platform Security Engineer - Remote/Hybrid

Zoom; United Kingdom; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Zoom, via Workvivo, is seeking a security-focused engineer to uncover and mitigate vulnerabilities across the Workvivo platform (Web, Mobile, AWS) while collaborating with Zoom Security teams. You will help embed secure coding practices throughout the software development lifecycle and provide guidance to developers and stakeholders.

In this hybrid role, you will contribute to our security training program, engage with Bug Bounty and Incident Response teams, and drive security improvements

Qualifications

• Experience conducting penetration tests on Web Apps, APIs and Mobile.
• Ability to critically analyse vulnerability reports from external partners and customers.
• Solid understanding of secure coding practices and security frameworks.

Responsibilities

• Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and infrastructure (Web App, Mobile, AWS).
• Identify vulnerabilities and work with cross-functional teams to remediate securely.
• Prioritize threat modeling and risk assessments during design phases.
• Advise on DAST, SAST, SCA and securing the CI/CD pipeline; contribute to automated security tooling.
• Improve security across Workvivo and Zoom; contribute to Engineering Security training.
• Collaborate with Bug Bounty, Incident Response, SOC, Vulnerability Management, CSA teams.
• Develop and implement automated security solutions.

Skills

Penetration testing

Vulnerability assessment

AWS knowledge

Burp Suite

Invicti/Netsparker

Programming: PHP, Laravel, Go, Java, C

Security tooling

Secure coding practices

Architectural diagrams

Communication (written)

Tools

Burp Suite

Invicti/NetSparker

OWASP ZAP

Job description

Zoom, via Workvivo, is seeking a security-focused engineer to uncover and mitigate vulnerabilities across the Workvivo platform (Web, Mobile, AWS) while collaborating with Zoom Security teams. You will help embed secure coding practices throughout the software development lifecycle and provide guidance to developers and stakeholders.

In this hybrid role, you will contribute to our security training program, engage with Bug Bounty and Incident Response teams, and drive security improvements