Security Engineer
What you can expect
As an Application Security Engineer, you will work with security testing automation and tools, focusing on Static Application Security Testing/Dynamic Application Security Testing implementation. You'll develop security programs, guide teams on secure coding, and manage container security. The role combines technical work (vulnerability assessment, security testing, automation) with cross-functional collaboration. You'll communicate security recommendations and help modernize security processes through CI/CD integration, while working with advanced tools including AI solutions.
About the Team
The security team specializes in application security engineering, focusing on automating security testing through SAST and DAST tools. They develop security programs, guide secure coding, and manage container security. Their role blends technical tasks like vulnerability assessments and automation with cross-functional collaboration. A key focus is modernizing security through CI/CD integration and using advanced tools, including AI, to strengthen security practices.
Responsibilities
- Developing or employing 3rd party security test automation solutions for Containers, Software Composition Analysis, and (Static Application Security Testing) / (Dynamic Application Security Testing).
- Developing and enforcing security policies, procedures, and standards specific to container development and deployment.
- Triaging and validating security vulnerabilities found or reported by security tools, communicate issues to the application owners, provide meaningful remediation recommendations, and validate their resolution.
- Participating in manual security testing on web applications, web services, native and mobile applications while measuring coverage.
- Identifying potential vulnerabilities (Open Web Application Security Project top 10, critical/high and common issues in National Vulnerability Database, etc.) and methods of improvement in security design or implementation.
- Collaborating with development and operations teams to integrate security into the Continuous Integration/Continuous Deployment pipeline and automate security processes.
- Developing tools or scripts to automate repetitive tasks to streamline security automation and integration with CI/CD processes.
What we're looking for
- 3+ years of experience with a Bachelor's in a related field. (Computer Science, Information Security, Computer Engineering).
- Prove experience working as a Security Engineer or in a similar role with a focus on security testing, container security, and SCA/SAST/DAST
- Demonstrate experience with container security tools, image scanning, and vulnerability management; knowledgeable in security principles, protocols, and standards like CIS benchmarks and OWASP Top 10.
- Have experience with one or more of security tools such as Kali Linux, Burp, Checkmarx, Netsparker, Coverity, Prisma, etc.
- Have analytical and problem-solving skills, with the ability to identify and mitigate security risks in complex environments.
- Have communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and communicate technical concepts to non-technical stakeholders.
- Be certified (e.g. Docker Certified Security Specialist, Certified Kubernetes Security Specialist).
- Have experience working with (IAST) - Interactive Apps Security Testing - (IRASP) - app self protection (security defense) fights back in real time.
Salary Range or On Target Earnings:
Minimum:
$98 900,00
Maximum:
$228 700,00
In addition to the base salary and/or OTE listed Zoom has a Total Direct Compensation philosophy that takes into consideration; base salary, bonus and equity value.
Note: Starting pay will be based on a number of factors and commensurate with qualifications & experience.
We also have a location based compensation structure; there may be a different range for candidates in this and other locations
At Zoom, we offer a window of at least 5 days for you to apply because we believe in giving you every opportunity. Below is the potential closing date, just in case you want to mark it on your calendar. We look forward to receiving your application!
Anticipated Position Close Date:
01/16/26
Ways of Working
Our structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In-Person is indicated in the job description/posting.
Benefits
As part of our award-winning workplace culture and commitment to delivering happiness, our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work-life balance; and contribute to their community in meaningful ways. Click Learn for more information.
About Us
Zoomies help people stay connected so they can get more done together. We set out to build the best collaboration platform for the enterprise, and today help people communicate better with products like Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars.
We're problem-solvers, working at a fast pace to design solutions with our customers and users in mind. Find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment.
Our Commitment
At Zoom, we believe great work happens when people feel supported and empowered. We're committed to fair hiring practices that ensure every candidate is evaluated based on skills, experience, and potential. If you require an accommodation during the hiring process, let us know-we're here to support you at every step.
If you need assistance navigating the interview process due to a medical disability, please submit an Accommodations Request Form and someone from our team will reach out soon. This form is solely for applicants who require an accommodation due to a qualifying medical disability. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed.
#LI-Remote