Senior Product Security Engineer - Remote

Zoom; Olympia (WA); Hybrid; USD 99,000 - 229,000; Full time

Job summary

Zoom is seeking a Product Security Engineer to lead security design and reviews across its products and services. The role partners with engineering teams to design, implement, and validate secure solutions, serving as a trusted security advisor on architecture and feature reviews.

The team emphasizes security architecture, threat modeling, and hands-on testing using Burp Suite and Coverity, with focus on AWS IAM/S3 configurations and cloud infrastructure security.

Qualifications

• Bachelor's degree and 5+ years security experience.
• Experience in testing across web/mobile/cloud environments.
• Strong knowledge of OWASP, cryptography, SDLC.

Responsibilities

• Being a security subject-matter expert, guide engineering teams in end-to-end secure system design and implementation.
• Conducting threat modeling, architecture review, security code review, security assessment, and security testing (web application, native application, web services, cloud-based services, and infrastructure assessments).
• Performing cloud infrastructure reviews from a security perspective; the primary focus will be on AWS permissions and configuration issues within components like IAM and S3.
• Performing an in-depth security review of new Zoom features and functionalities. This includes identifying security vulnerabilities such as those in the Owasp Top Ten, common issues from the NVD, and risks like RCE. It also involves reviewing Java or Python code and verifying security posture through manual and automated testing using tools like Burp Suite and Coverity.
• Identifying gaps in existing cloud security architecture design/configuration, recommend changes or enhancements (authentication, authorization, network segmentation, container configuration, bastion host setup, etc.).
• Providing hands on security training and secure coding best practices to engineering teams.

Skills

Security design

Threat modeling

Security testing

Cloud security

Java

Security architecture

Education

Bachelor's degree in CS/Info/Security/Engineering or equivalent

Tools

Burp Suite

Coverity

Job description

Zoom is seeking a Product Security Engineer to lead security design and reviews across its products and services. The role partners with engineering teams to design, implement, and validate secure solutions, serving as a trusted security advisor on architecture and feature reviews.

The team emphasizes security architecture, threat modeling, and hands-on testing using Burp Suite and Coverity, with focus on AWS IAM/S3 configurations and cloud infrastructure security.