Remote Product Security Engineer: Cloud & Threat Modeling

Zoom; Madison (WI); Hybrid; USD 99,000 - 229,000; Full time

Job summary

Zoom is seeking a Product Security Engineer to lead security design and reviews across products and services. You will collaborate with engineering teams to implement secure solutions and act as a trusted security advisor on architecture and new features.

The team focuses on secure releases, compliance, and cutting-edge cloud security, leveraging tools like Burp Suite and Coverity to validate security posture.

Qualifications

• Bachelor's degree or equivalent in a relevant field with 5+ years in security.
• Experience testing security across web, native, distributed, and cloud systems (AWS).
• Solid understanding of software security architecture, threat modeling, secure code review, cryptography, and SDLC.

Responsibilities

• Guide engineering teams in end-to-end secure system design and implementation.
• Conduct threat modeling, architecture review, security code review, assessments and testing (web/native/cloud).
• Perform cloud security reviews focusing on AWS permissions and configuration (IAM, S3).
• Review new Zoom features for vulnerabilities (OWASP Top Ten, NVD, RCE) and verify security posture with manual/automated testing (Burp Suite, Coverity).
• Identify gaps in cloud security architecture; recommend authentication, authorization, segmentation, and container security improvements.
• Provide hands-on security training and secure coding best practices to engineers.

Skills

Security testing

AWS security

Threat modeling

Secure coding

Security reviews

Communication of best practices

Education

Bachelor's degree in CS/Info Sci/Cyber Security/Engineering

Tools

Burp Suite

Coverity

AWS IAM & S3

Job description

Zoom is seeking a Product Security Engineer to lead security design and reviews across products and services. You will collaborate with engineering teams to implement secure solutions and act as a trusted security advisor on architecture and new features.

The team focuses on secure releases, compliance, and cutting-edge cloud security, leveraging tools like Burp Suite and Coverity to validate security posture.