Senior AI-Driven Offensive Security Engineer

Zoom; Sacramento (CA); Hybrid; USD 124,000 - 271,000; Full time

Job summary

Zoom is seeking a senior security researcher at the intersection of offensive security and applied AI in California. The role focuses on surfacing critical risks across Zoom’s products, applications, services and infrastructure before they become incidents.

It emphasizes hands‑on research over scanning, with high autonomy and collaboration with Security Assurance teams. You will use AI models, threat analysis and architecture knowledge to identify exploit paths, validate exploitability and

Qualifications

• 5+ years of hands-on vulnerability research or offensive security experience.
• Proven ability to choose targets, form hypotheses, and assess exploitability.
• Experience with AI-driven research processes and model-based tools.
• Deep technical expertise in at least one security domain.
• Strong programming and debugging skills to read code and build tooling.
• Ability to communicate findings clearly to technical and nontechnical audiences.

Responsibilities

• Leverage AI to conduct vulnerability research across Zoom's products, applications, services, and infrastructure, with a focus on high-impact issues, subtle vulnerabilities, confirmed exploitability, and attack paths that cross component and trust boundaries.
• Use experience, threat analysis, architecture knowledge, source code, and observed system behavior to choose targets and guide investigations.
• Apply frontier and open-weight models, agents, and other AI capabilities across the research lifecycle: reconnaissance, code analysis, hypothesis generation, exploit development, and verification.
• Design and tune research harnesses that give models the right context, tools, execution environments, and feedback to investigate real targets.
• Develop custom tooling, including analysis utilities, fuzzers, agents, test harnesses, proofs of concept, and full exploits, when it helps answer the research question.
• Convert promising model output into defensible security evidence: reproduce findings, rule out false claims, establish preconditions, and distinguish a possible weakness from a demonstrated vulnerability with real impact.
• Improve the reliability and reach of AI-driven research by tackling false positives, false negatives, context limits, nondeterminism, and reproducibility.
• Work directly with Engineering and Product Security to communicate findings, support remediation, surface related risks, and verify fixes.
• Share tools, techniques, and lessons learned so Security Assurance and the broader Security org can enhance their processes through the use of AI.

Skills

Vulnerability research

Offensive security

AI-driven research

Security domain expertise

Programming & debugging

Communication of findings

Independent research

Job description

Zoom is seeking a senior security researcher at the intersection of offensive security and applied AI in California. The role focuses on surfacing critical risks across Zoom’s products, applications, services and infrastructure before they become incidents.

It emphasizes hands‑on research over scanning, with high autonomy and collaboration with Security Assurance teams. You will use AI models, threat analysis and architecture knowledge to identify exploit paths, validate exploitability and