Senior AI-Driven Offensive Security Engineer

Zoom; Saint Paul (MN); Hybrid; USD 124,000 - 271,000; Full time

Job summary

Zoom is seeking a security researcher at the intersection of offensive security and applied AI in Saint Paul, MN. You will surface critical risks across Zoom's products, services, and infrastructure, combining deep threat analysis with advanced models to hypothesize failure modes, validate exploitability, and trace attack paths beyond standard testing.

The role emphasizes hands-on, self-directed research with collaboration across Security Assurance teams.

Qualifications

• 5+ years of hands-on vulnerability research, offensive security, application security, or penetration testing.
• Experience with frontline offensive workflows using frontier and open-weight models.
• Ability to assess AI-driven research processes, identify false positives, reproducibility gaps, and model-enabled trade-offs.
• Deep technical expertise in web apps/APIs, cloud or infrastructure, or reverse engineering.
• Strong programming and debugging skills to read code, build tooling, and trace system behavior.
• Ability to clearly communicate complex findings to technical and nontechnical audiences.

Responsibilities

• Leverage AI to conduct vulnerability research across Zoom's products, applications, services, and infrastructure, focusing on high-impact issues and exploitability.
• Use architecture knowledge, source code, and observed behavior to select targets and guide investigations.
• Apply frontier/open-weight models and other AI tools across reconnaissance, code analysis, hypothesis generation, exploit development, and verification.
• Design research harnesses to provide models with proper context, tools, environments, and feedback.
• Develop custom tooling, including analysis utilities, fuzzers, agents, test harnesses, and proofs of concept.
• Convert model outputs into defensible evidence by reproducing findings and ruling out false claims.
• Improve AI-driven research reliability by addressing false positives/negatives and nondeterminism.
• Collaborate with Engineering to communicate findings, support remediation, and verify fixes.
• Share tools and lessons learned to enhance security processes with AI.

Job description

Zoom is seeking a security researcher at the intersection of offensive security and applied AI in Saint Paul, MN. You will surface critical risks across Zoom's products, services, and infrastructure, combining deep threat analysis with advanced models to hypothesize failure modes, validate exploitability, and trace attack paths beyond standard testing.

The role emphasizes hands-on, self-directed research with collaboration across Security Assurance teams.