Remote Product Security Engineer

Zoom; Phoenix (AZ); Hybrid; USD 99,000 - 229,000; Full time

Job summary

Zoom is seeking a Product Security Engineer to drive secure design and reviews across its products and services in a hybrid work model in the United States. You will collaborate with engineering teams to design, implement, and validate secure solutions, serving as a trusted security advisor for new features and security enhancements.

The team focuses on cloud security, threat modeling, and secure development practices, conducting architecture reviews, code reviews, and security testing with

Qualifications

• Bachelor's degree in Computer Science, Information Science, Cyber Security, Computer or Electrical Engineering or similar field, or equivalent experience.
• 5+ years of experience in security across web, native, distributed systems and cloud infrastructure (AWS).
• Solid understanding of software security architecture, threat modeling, secure code review, cryptography, and SDLC.

Responsibilities

• Being a security subject-matter expert, guide engineering teams in end-to-end secure system design and implementation.
• Conduct threat modeling, architecture review, security code review, security assessment, and security testing (web application, native application, web services, cloud-based services, and infrastructure assessments).
• Performing cloud infrastructure reviews focusing on AWS IAM and S3 configuration issues.
• Performing an in-depth security review of new Zoom features and functionalities, identifying OWASP Top Ten and NVD risks, and reviewing Java or Python code.
• Identify gaps in cloud security architecture design/configuration and recommend changes or enhancements.
• Providing hands-on security training and secure coding best practices to engineering teams.

Skills

Threat modeling

Security testing

AWS security

Secure code review

Java

Cryptography

Education

Bachelor's degree in CS or related field

Tools

Burp Suite

Coverity

Job description

Zoom is seeking a Product Security Engineer to drive secure design and reviews across its products and services in a hybrid work model in the United States. You will collaborate with engineering teams to design, implement, and validate secure solutions, serving as a trusted security advisor for new features and security enhancements.

The team focuses on cloud security, threat modeling, and secure development practices, conducting architecture reviews, code reviews, and security testing with