Cloud Security Architect & Threat Modeling Lead

Zoom; United States; Hybrid; USD 99,000 - 229,000; Full time

Job summary

Zoom is seeking a Security Engineer to design and review security across our products and services. You will collaborate with engineering teams to implement secure solutions, guide architecture, and assess new features for security enhancements, with a focus on cloud infrastructure and AWS.

As part of the Security Architecture team, you’ll perform threat modeling, security code reviews, and security testing, and provide hands-on training to engineering teams to improve secure coding practices

Qualifications

• Bachelor’s degree in Computer Science, Information Science, Cyber Security, Engineering or equivalent experience.
• 5+ years of experience in security.
• Experience in security testing of web apps, native apps, distributed systems and cloud infrastructure (AWS).
• Knowledge of software security architecture, threat modeling, secure code review, cryptography, and SDLC.
• Hands-on security experience with AWS and its service components.
• Knowledge of network, system, and application layer attacks and mitigations.
• Proficiency in Java or other programming languages.

Responsibilities

• Guide engineering teams in end-to-end secure system design and implementation.
• Conduct threat modeling, architecture reviews, secure code reviews, security testing.
• Perform cloud infrastructure security reviews focusing on AWS IAM and S3.
• Review new Zoom features for security and identify vulnerabilities (OWASP Top Ten, NVD, RCE).
• Identify gaps in cloud security architecture and propose changes.
• Provide hands-on security training and secure coding best practices.

Skills

Security testing

AWS security

Threat modeling

Secure code review

SDLC knowledge

Java development

Security architecture

Clear communication

Education

Bachelor's degree in Computer Science or related

Tools

Burp Suite

Coverity

Job description

Zoom is seeking a Security Engineer to design and review security across our products and services. You will collaborate with engineering teams to implement secure solutions, guide architecture, and assess new features for security enhancements, with a focus on cloud infrastructure and AWS.

As part of the Security Architecture team, you’ll perform threat modeling, security code reviews, and security testing, and provide hands-on training to engineering teams to improve secure coding practices