Senior AI-Driven Offensive Security Engineer

Zoom; Salem (OR); Hybrid; USD 124,000 - 271,000; Full time

Job summary

Zoom's Offensive Security team is seeking an experienced researcher to surface critical risks across Zoom’s products, applications, services, and infrastructure using AI-driven methods. You will conduct hands-on vulnerability research, craft robust hypotheses, and validate exploitability in complex systems.

With 5+ years of experience, you will collaborate with Security Assurance to influence remediation and risk decisions, delivering defensible evidence and responsible disclosure when needed.

Qualifications

• 5+ years of vulnerability research and offensive security experience.
• Experience with AI-driven security research processes and reproducibility.
• Strong programming and debugging skills across languages.

Responsibilities

• Leverage AI to conduct vulnerability research across Zoom's products, applications, services, and infrastructure, focusing on high-impact issues and exploitability.
• Use threat analysis and architecture knowledge to guide investigations.
• Apply frontier/open-weight models, agents, and AI capabilities across the research lifecycle: reconnaissance, code analysis, hypothesis generation, exploit development, verification.
• Design and tune research harnesses to give models the right context, tools, and environments.
• Develop custom tooling, including analysis utilities, fuzzers, agents, and proof-of-concept exploits.
• Convert model output into defensible security evidence: reproduce findings and distinguish weaknesses from exploits.

Skills

Vulnerability research

Offensive security

AI/ML security

Threat modeling

Programming

Debugging

Tools

Analysis utilities

Fuzzers

Agents

Job description

Zoom's Offensive Security team is seeking an experienced researcher to surface critical risks across Zoom’s products, applications, services, and infrastructure using AI-driven methods. You will conduct hands-on vulnerability research, craft robust hypotheses, and validate exploitability in complex systems.

With 5+ years of experience, you will collaborate with Security Assurance to influence remediation and risk decisions, delivering defensible evidence and responsible disclosure when needed.