Security Engineer

Responsibilities: - Being a security subject-matter expert, guide engineering teams in end-to-end secure system design and implementation. - Conducting threat modeling, architecture review, security code review, security assessment, and security testing (web application, native application, web services, cloud-based services, and infrastructure assessments). - Performing cloud infrastructure reviews from a security perspective; the primary focus will be on AWS permissions and configuration issues within components like IAM and S3. - Performing an in-depth security review of new Zoom features and functionalities. This includes identifying security vulnerabilities such as those in the OWASP Top Ten, common issues from the NVD, and risks like RCE. It also involves reviewing Java or Python code and verifying security posture through manual and automated testing using tools like Burp Suite and Coverity. - Identifying gaps in existing cloud security architecture design/configuration, recommend changes or enhancements (authentication, authorization, network segmentation, container configuration, bastion host setup, etc.). - Providing hands on security training and secure coding best practices to engineering teams. Qualifications: - Bachelor's degree in Computer Science, Information Science, Cyber Security, Computer or Electrical Engineering (or similar field), and 5+ years in security. - Extensive experience in security testing in various environments, including assessing the security posture of web applications, native applications, distributed systems, and cloud infrastructure such as AWS. - Solid understanding of software security architecture, design, threat modeling, secure code review, cryptography, and the SDLC. - Hands on security experience working with AWS and common service components. - In-depth knowledge of network based, system level, and application layer attacks and mitigation methods. - Proficiency in Java programming.