Product Security Architect - Cloud & Secure Coding

Socket.dev; United States; Hybrid; USD 99,000 - 229,000; Full time

Job summary

Zoom is seeking a Product Security Engineer to secure design and reviews across our products and services. You will collaborate with engineering to design, implement, and validate secure solutions, serving as a trusted security advisor on architecture and feature reviews.

The Security Architecture team ensures secure releases and compliance with SLAs, working with engineering, compliance, and DevOps across the organization.

Qualifications

• Bachelor's degree in Computer Science, Information Science, Cyber Security, or related field; 5+ years in security.
• Experience in security testing across web/native apps, distributed systems, and cloud infra.
• Solid understanding of security architecture, threat modeling, secure coding, and SDLC.
• Hands-on AWS security experience identifying gaps in design and configuration.
• Knowledge of OWASP, infrastructure hardening, web/server security, and cryptography.
• Proficiency in Java is required.

Responsibilities

• Guide engineering teams in end-to-end secure system design and implementation.
• Conduct threat modeling, architecture review, security code review, security assessment, and testing.
• Review cloud infrastructure security with focus on AWS IAM and S3 configurations.
• Perform in-depth security reviews of Zoom features and verify with manual/ automated testing (Burp Suite, Coverity).
• Identify gaps in cloud security architecture and recommend mitigations.
• Provide hands-on security training and secure coding guidance to engineers.

Skills

Security testing

Threat modeling

Secure code review

AWS security

Security architecture

Communication skills

Java

Education

Bachelor's degree in CS/IS/Engineering or related field

Tools

Burp Suite

Coverity

AWS IAM/S3 tooling

Job description

Zoom is seeking a Product Security Engineer to secure design and reviews across our products and services. You will collaborate with engineering to design, implement, and validate secure solutions, serving as a trusted security advisor on architecture and feature reviews.

The Security Architecture team ensures secure releases and compliance with SLAs, working with engineering, compliance, and DevOps across the organization.