Senior Security Engineer

Zoom; England; Ibrido; GBP 70.000 - 110.000; Tempo pieno

Descrizione del lavoro

Zoom is seeking a Senior Security Engineer to safeguard the Workvivo platform across web, mobile, and AWS infrastructure. You will embed security early in the development lifecycle, collaborating with engineering teams and Zoom Security partners to build scalable security programs.

You will drive threat modeling, secure coding practices, and advanced security tooling, while communicating complex risks to technical and non-technical stakeholders in a global, hybrid environment.

Competenze

• Experience conducting web, API, and mobile penetration tests.
• Knowledge of secure coding practices and application security frameworks.
• Ability to critique vulnerability reports from external partners and customers.
• Experience with AWS and cloud security principles.
• Excellent written and verbal communication across technical and non-technical audiences.

Mansioni

• Conduct security assessments, code reviews, and penetration testing across the Workvivo platform (Web App, Mobile App, and AWS Infrastructure), identifying and managing vulnerabilities in close collaboration with Security, Infrastructure, and Application Engineering teams.
• Lead threat modeling and risk assessments for new features and infrastructure changes, engaging Application Engineering teams early in the design phase to embed security controls before deployment.
• Advance SDLC security practices by advising on DAST, SAST, and SCA tooling, securing CI/CD pipelines, and building automated security solutions to scale detection and response.
• Contribute to Zoom’s Engineering Security training program and collaborate cross-functionally across Zoom Security functions including Bug Bounty, Incident Response, SOC, Vulnerability Management, and Customer Security Assurance (CSA).

Conoscenze

Penetration testing

Application security

Secure coding

AWS security

Security tooling

Architectural diagrams

Strumenti

Burp Suite

Invicti/Netsparker

OWASP ZAP

Descrizione del lavoro

What You Can Expect

As a Senior Security Engineer on the Workvivo team, you will play a meaningful role in safeguarding an employee experience platform used by organizations around the world. Your work spans the full Workvivo platform, from web and mobile applications to AWS infrastructure, giving you breadth and depth across modern security disciplines. You will collaborate closely with application engineering teams to embed security from the earliest stages of the development lifecycle, and engage cross-functionally with Zoom Security partners across Bug Bounty, Incident Response, and Vulnerability Management. This is a role for someone who finds real satisfaction in building security programs alongside great teams, and who is energized by the opportunity to shape how security is practiced across a growing global product.

About the Team

Workvivo is an employee experience platform built to amplify workplace culture and keep people connected, regardless of where they work. As part of Zoom, Workvivo operates within a broader mission to enable meaningful connections and modern collaboration for businesses and individuals worldwide. The security team supporting Workvivo works across a range of disciplines, from application and infrastructure security to cross-functional engagement with Zoom’s global Security organization.

Responsibilities

• Conduct security assessments, code reviews, and penetration testing across the Workvivo platform (Web App, Mobile App, and AWS Infrastructure), identifying and managing vulnerabilities in close collaboration with Security, Infrastructure, and Application Engineering teams.
• Lead threat modeling and risk assessments for new features and infrastructure changes, engaging Application Engineering teams early in the design phase to embed security controls before deployment.
• Advance SDLC security practices by advising on DAST, SAST, and SCA tooling, securing CI/CD pipelines, and building automated security solutions to scale detection and response.
• Contribute to Zoom’s Engineering Security training program and collaborate cross-functionally across Zoom Security functions including Bug Bounty, Incident Response, SOC, Vulnerability Management, and Customer Security Assurance (CSA).

What We’re Looking For

• Proven experience conducting penetration tests focused on web applications, APIs, and mobile platforms, with the ability to move beyond surface-level findings and critically analyze vulnerability and penetration test reports from external partners and customers.
• Experience in application security, software development, or related disciplines, with a solid understanding of secure coding practices and application security frameworks.
• Proficiency in at least one programming language (such as PHP, Go, Java, or C++) and hands-on experience with security tooling including Burp Suite, Invicti (Netsparker), and OWASP ZAP, with familiarity with security protocols and encryption methods.
• Working knowledge of AWS environments and cloud security principles.
• Ability to produce architectural diagrams with a focus on the security control plane.
• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences, and a genuine curiosity for emerging security technologies.

Ways of Working

Our structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In-Person is indicated in the job description/posting.

Benefits

As part of our award-winning workplace culture and commitment to delivering happiness, our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work-life balance; and contribute to their community in meaningful ways. Click for more information.

About Us

Zoomies help people stay connected so they can get more done together. We set out to build the best collaboration platform for the enterprise, and today help people communicate better with products like Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars. We’re problem-solvers, working at a fast pace to design solutions with our customers and users in mind. Find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment.

Our Commitment

At Zoom, we believe great work happens when people feel supported and empowered. We’re committed to fair hiring practices that ensure every candidate is evaluated based on skills, experience, and potential. If you require an accommodation during the hiring process, let us know—we’re here to support you at every step.

If you need assistance navigating the interview process due to a medical disability, please submit an and someone from our team will reach out soon. This form is solely for applicants who require an accommodation due to a qualifying medical disability. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed.

Our interviews are supported by BrightHire, a tool that helps us create a consistent and thoughtful interview experience and may include recordings. Please refer to our for more information of how we use your data.

#LI-Remote