Product Security Engineer - Build Secure Cloud Apps

Maven; United States; Hybrid; USD 99,000 - 229,000; Full time

Job summary

Zoom is seeking a Product Security Engineer to design, review and validate secure solutions across our products and services. You will work with engineering teams to apply threat modeling, security code reviews, and risk assessments for new features and cloud components.

The role emphasizes hands-on security in AWS, IAM, S3, and cloud infrastructure, plus collaboration with Security Architecture to improve secure by design.

Qualifications

• Bachelor's degree or equivalent in a related field and 5+ years of security experience.
• Experience in security testing across web, native, distributed and cloud environments.
• Strong knowledge of software security architecture, threat modeling and secure SDLC practices.
• Hands-on AWS experience with core services and security controls.

Responsibilities

• Act as security SME; guide engineering teams in end-to-end secure design and implementation.
• Conduct threat modeling, architecture reviews, security code reviews, security assessments and testing.
• Perform cloud infrastructure reviews with emphasis on AWS IAM and S3 configurations.
• Review new features for security posture; identify OWASP Top Ten and NVD risks; verify with manual and automated tests (Burp Suite, Coverity).
• Identify gaps in cloud security design/configuration and recommend improvements.
• Provide hands-on security training and secure coding best practices.

Skills

Security testing

AWS security

Threat modeling

Secure code review

Cloud security architecture

Java

Education

Bachelor's degree in Computer Science, Information Science, Cyber Security, Computer or Electrical Engineering (or similar field)

Tools

Burp Suite

Coverity

OWASP Top Ten

Job description

Zoom is seeking a Product Security Engineer to design, review and validate secure solutions across our products and services. You will work with engineering teams to apply threat modeling, security code reviews, and risk assessments for new features and cloud components.

The role emphasizes hands-on security in AWS, IAM, S3, and cloud infrastructure, plus collaboration with Security Architecture to improve secure by design.