Senior Security Engineer — Cloud & App Sec (Remote)

Zoom; England; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Zoom is seeking a Senior Security Engineer to safeguard the Workvivo platform across web, mobile, and AWS infrastructure. You will embed security early in the development lifecycle, collaborating with engineering teams and Zoom Security partners to build scalable security programs.

You will drive threat modeling, secure coding practices, and advanced security tooling, while communicating complex risks to technical and non-technical stakeholders in a global, hybrid environment.

Qualifications

• Experience conducting web, API, and mobile penetration tests.
• Knowledge of secure coding practices and application security frameworks.
• Ability to critique vulnerability reports from external partners and customers.
• Experience with AWS and cloud security principles.
• Excellent written and verbal communication across technical and non-technical audiences.

Responsibilities

• Conduct security assessments, code reviews, and penetration testing across the Workvivo platform (Web App, Mobile App, and AWS Infrastructure), identifying and managing vulnerabilities in close collaboration with Security, Infrastructure, and Application Engineering teams.
• Lead threat modeling and risk assessments for new features and infrastructure changes, engaging Application Engineering teams early in the design phase to embed security controls before deployment.
• Advance SDLC security practices by advising on DAST, SAST, and SCA tooling, securing CI/CD pipelines, and building automated security solutions to scale detection and response.
• Contribute to Zoom’s Engineering Security training program and collaborate cross-functionally across Zoom Security functions including Bug Bounty, Incident Response, SOC, Vulnerability Management, and Customer Security Assurance (CSA).

Skills

Penetration testing

Application security

Secure coding

AWS security

Security tooling

Architectural diagrams

Tools

Burp Suite

Invicti/Netsparker

OWASP ZAP

Job description

Zoom is seeking a Senior Security Engineer to safeguard the Workvivo platform across web, mobile, and AWS infrastructure. You will embed security early in the development lifecycle, collaborating with engineering teams and Zoom Security partners to build scalable security programs.

You will drive threat modeling, secure coding practices, and advanced security tooling, while communicating complex risks to technical and non-technical stakeholders in a global, hybrid environment.