Senior Product Security Engineer – Remote & Cloud Security

Zoom; Santa Fe (NM); Hybrid; USD 99,000 - 229,000; Full time

Job summary

Zoom is seeking a Product Security Engineer to design, review, and validate secure solutions across products and services. You will work with engineering teams to ensure end-to-end security, including threat modeling, architecture reviews, and secure coding practices.

The role emphasizes hands-on security testing in cloud environments (AWS), vulnerability identification (OWASP Top Ten, NVD), and collaboration with DevOps and compliance teams to meet security goals and SLAs.

Qualifications

• Bachelor's degree in Computer Science, Information Science, Cyber Security, Computer or Electrical Engineering (or similar field).
• Minimum 5+ years of experience in security.
• Experience in security testing across web/native/distributed/cloud environments.

Responsibilities

• Guide engineering teams in end-to-end secure system design and implementation.
• Conduct threat modeling, architecture review, security code review, and security testing.
• Perform cloud infrastructure reviews focusing on AWS IAM and S3 configurations.
• Review new Zoom features for security vulnerabilities and validate posture with manual/automated testing (Burp Suite, Coverity).
• Identify gaps in cloud security architecture and recommend improvements (auth, network, container config, bastion host).
• Provide hands-on security training and secure coding best practices.

Skills

Threat modeling

Security testing

AWS

Java

Security architecture

Secure code review

Burp Suite

Coverity

Education

Bachelor's degree in Computer Science or related field

Tools

Burp Suite

Coverity

AWS

Job description

Zoom is seeking a Product Security Engineer to design, review, and validate secure solutions across products and services. You will work with engineering teams to ensure end-to-end security, including threat modeling, architecture reviews, and secure coding practices.

The role emphasizes hands-on security testing in cloud environments (AWS), vulnerability identification (OWASP Top Ten, NVD), and collaboration with DevOps and compliance teams to meet security goals and SLAs.