Security Engineer

Zoom; Columbus (OH); On-site; USD 98,900 - 228,700; Full time

Benefits offered by this job

Comprehensive benefits program

Support for work-life balance

Opportunities for career advancement

Job summary

A leading communication platform in the United States is seeking an experienced Security Engineer responsible for security design across its products. The ideal candidate must possess extensive experience in security testing and AWS. You'll engage with engineering teams to ensure secure solutions, perform thorough vulnerability assessments, and reinforce secure coding practices. This is a unique opportunity to impact the security of cutting-edge technologies.

Qualifications

• 5+ years of experience in security testing across various environments.
• Solid understanding of software security architecture and the SDLC.
• Hands-on security experience with AWS and common components.

Responsibilities

• Guide engineering teams in secure system design and implementation.
• Conduct threat modeling, architecture review, and security testing.
• Identify security vulnerabilities and review new features for security.

Skills

Security testing

Cloud infrastructure security (AWS)

Threat modeling

Secure coding

Communication skills

Education

Bachelor's in Computer Science or related field

Tools

Burp Suite

Job description

What you can expect

The Security Engineer is responsible for security design and reviews across our products and services, with a specific focus on Platform services and core infrastructure components. The ideal candidate brings broad technical expertise and hands‑on experience in end‑to‑end product security. In this role, you’ll collaborate with engineering teams, primarily those focused on Platform services, to design, implement, and validate secure solutions. You’ll serve as a trusted security advisor, guiding architecture and reviewing implementation, particularly for new features or security enhancements. This is a unique opportunity to work with cutting‑edge cloud and security technologies while making a direct impact on Zoom’s platform.

About the Team

The Security Architecture team is dedicated to ensuring Zoom releases and deploys secure products. We work with diverse engineering, compliance, and DevOps teams across the organization to meet security goals and maintain compliance with established SLAs. Focusing on platform‑level security, SDLC compliance, and core services.

Responsibilities

• Being a security subject‑matter expert, guide engineering teams in end‑to‑end secure system design and implementation, with a focus on Platform services and its associated components.
• Conducting threat modeling, architecture review, security code review, security assessment, and security testing (web application, native application, web services, cloud‑based services, and infrastructure assessments).
• Performing cloud infrastructure reviews from a security perspective; the primary focus will be on AWS permissions and configuration issues within components like IAM and S3. This is especially important in the context of Platform services.
• Performing an in‑depth security review of new Zoom features and functionalities. This includes identifying security vulnerabilities such as those in the OWASP Top Ten, common issues from the NVD, and risks like RCE. It also involves reviewing Java or Python code and verifying security posture through manual and automated testing using tools like Burp Suite and Coverity.
• Identifying gaps in existing cloud security architecture design/configuration, recommend changes or enhancements (authentication, authorization, network segmentation, container configuration, bastion host setup, etc.).
• Providing hands on security training and secure coding best practices to engineering teams.

What we’re looking for

• Have obtained a Bachelor’s in Computer Science, Information Science, Cyber Security, Computer or Electrical Engineering (or similar field), and 5+ years in security.
• Have extensive experience in security testing across various environments. This includes assessing the security posture of web applications, native applications, distributed systems, and cloud infrastructure such as AWS. It also includes a focus on securing infrastructure, deployments, and core platform services.
• Possess a solid understanding of software security architecture, design, threat modeling, secure code review, cryptography, and the SDLC. Able to clearly communicate best practices and effective mitigations for application security, particularly SDLC exceptions.
• Have hands‑on security experience working with AWS and common service components within AWS. Ability to identify security gaps in the overall design as well as configuration issues in individual components.
• Have in‑depth knowledge of network based, system level, and application layer attacks and mitigation methods.
• Have good knowledge of technology and security topics including network and application security (OWASP), infrastructure hardening, security baselines, web server, database security and applied cryptography.
• Have good development experience in one or more of the programming languages and platforms such as Java is required.
• Have the ability to speak Mandarin would be an advantage, but it’s not an expectation.

Salary Range or On Target Earnings

Minimum: $98 900,00

Maximum: $228 700,00

In addition to the base salary and/or OTE listed Zoom has a Total Direct Compensation philosophy that takes into consideration; base salary, bonus and equity value.

Note: Starting pay will be based on a number of factors and commensurate with qualifications & experience.

We also have a location based compensation structure; there may be a different range for candidates in this and other locations.

Anticipated Position Close Date

12/08/25

Ways of Working

Our structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In‑Person is indicated in the job description/posting.

Benefits

As part of our award‑winning workplace culture and commitment to delivering happiness, our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work‑life balance; and contribute to their community in meaningful ways. Click Learn for more information.

About Us

Zoomies help people stay connected so they can get more done together. We set out to build the best collaboration platform for the enterprise, and today help people communicate better with products like Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars. We’re problem‑solvers, working at a fast pace to design solutions with our customers and users in mind. Find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth‑focused environment.

Our Commitment

At Zoom, we believe great work happens when people feel supported and empowered. We’re committed to fair hiring practices that ensure every candidate is evaluated based on skills, experience, and potential. If you require an accommodation during the hiring process, let us know—we’re here to support you at every step.

If you need assistance navigating the interview process due to a medical disability, please submit an Accommodations Request Form (https://form.asana.com/?k=OIuqpO5Tv9XQTWp1bNYd8w&d=1127274756253361) and someone from our team will reach out soon. This form is solely for applicants who require an accommodation due to a qualifying medical disability. Non‑accommodation‑related requests, such as application follow‑ups or technical issues, will not be addressed.

#LI‑Remote