Remote Security Engineer — Cloud & App Security

Socket.dev; United States; Hybrid; USD 99,000 - 229,000; Full time

Job summary

Zoom is seeking a Security Engineer to drive security design and reviews across products and services. You’ll partner with engineering to implement secure solutions, advise on architecture, and validate security posture for new features in a cloud-based environment.

You will work with the Security Architecture team to assess threats, perform reviews, and train teams on secure coding practices, with a hybrid work model and global collaboration.

Qualifications

• Bachelor's degree in CS/Information Science, Cyber Security, Engineering or equivalent with 5+ years in security.
• Extensive security testing experience across web apps, native apps, distributed systems and cloud infra (AWS).
• Strong knowledge of software security architecture, threat modeling, secure code review and cryptography.
• Hands-on AWS security with IAM, S3 and related services; identify gaps in design and config.
• Understanding of OWASP top ten, infrastructure hardening and cryptographic best practices.

Responsibilities

• Be the security SME guiding end-to-end secure system design and implementation.
• Conduct threat modeling, architecture reviews, security code reviews and testing.
• Perform cloud infra reviews focusing on AWS permissions and configuration (IAM/S3).
• Review new features for security posture, identify vulnerabilities and verify mitigations.
• Identify cloud security gaps and recommend design/configuration enhancements.
• Provide hands-on security training and secure coding guidance to engineers.

Skills

Security testing

Threat modeling

AWS security

Secure code review

Cryptography

SDLC

Java

Education

Bachelor's degree in CS/InfoSec/Engineering

Tools

Burp Suite

Coverity

IAM

S3

Job description

Zoom is seeking a Security Engineer to drive security design and reviews across products and services. You’ll partner with engineering to implement secure solutions, advise on architecture, and validate security posture for new features in a cloud-based environment.

You will work with the Security Architecture team to assess threats, perform reviews, and train teams on secure coding practices, with a hybrid work model and global collaboration.