Senior Security Engineer - Remote (Cloud, Web & API)

Maven Ventures; United Kingdom; Híbrido; GBP 80.000 - 110.000; Jornada completa

Descripción de la vacante

Zoom is seeking a security engineer to uncover vulnerabilities across Workvivo and related infrastructure, including Web App, Mobile App, and AWS. You will perform penetration testing, code reviews, and security assessments, collaborating with engineering to embed secure coding practices.

You’ll work with Zoom Security teams, contribute to training, and help raise security awareness across the organization. Strong experience in AWS, Burp Suite, Invicti, and programming languages is required.

Formación

• Excellent experience completing penetration tests (Web apps, API, Mobile).
• Ability to critically analyse vulnerability and penetration test reports.
• Go beyond basic vulnerabilities; challenge security findings.
• Ability to produce architectural diagrams focusing on the security control plane.
• Experience in application security, software development, or related areas with secure coding practices.
• Strong knowledge of AWS.
• Proficiency with security testing tools (Burp Suite, Invicti) and encryption concepts.
• Proficiency in programming languages (PHP, Laravel, Go, Java, C++, etc.).
• Excellent written and verbal communication for technical and non-technical audiences.

Responsabilidades

• Conduct security assessments, code reviews, and penetration testing to identify vulnerabilities across the Workvivo platform (Web App, Mobile App, AWS infra).
• Identify vulnerabilities and collaborate with internal teams, daily with Security, AWS Infrastructure & App Engineering to ensure security, scalability and stability.
• Prioritize threat modeling of new security features and perform risk assessments early in design phases.
• Advise on SDLC security: DAST, SAST, SCA and secure the pipeline; introduce automated security solutions.
• Contribute to cross-tenant security improvements and engineering security training programs.
• Work across Zoom Security teams (Bug Bounty, Incident Response, SOC, Vulnerability Management, CSA).
• Code and integrate automated security solutions.

Conocimientos

Penetration testing

Threat modeling

Security architecture

AWS knowledge

Security tools

Programming languages

Security communication

Cross-functional collaboration

Herramientas

Burp Suite

Invicti

OWASP ZAP

Descripción del empleo

Zoom is seeking a security engineer to uncover vulnerabilities across Workvivo and related infrastructure, including Web App, Mobile App, and AWS. You will perform penetration testing, code reviews, and security assessments, collaborating with engineering to embed secure coding practices.

You’ll work with Zoom Security teams, contribute to training, and help raise security awareness across the organization. Strong experience in AWS, Burp Suite, Invicti, and programming languages is required.