Release Security Engineer

Description:

• Zoomies help the world connect — and deliver happiness while doing it. We set out to build the best video conferencing product for the enterprise, and today help people communicate better with products like Zoom Phone, Zoom Rooms, Zoom Video Webinars, Zoom Workplace Apps, AI Companion, and OnZoom.

• We’re problem-solvers and self-starters, working at a fast pace to design solutions with our customers and users in mind. Here, you’ll work across teams to dig deep into impactful projects that are changing the way people communicate, and enjoy opportunities to advance your career in a diverse, inclusive environment. 

• At Zoom, we are seeking a Tier 1 Support Analyst / Engineer to join the Security Services team. This role will be instrumental in supporting critical security functions and services that help Zoom release and deploy secure products. These include in-house built systems for threat detection like malware scanning, vulnerability and suspicious behavior detections. 

• As a Support Analyst / Engineer, you will be supporting our Product Engineering, Build Engineering, and Release Management teams during critical phases of our build and release process. This involves monitoring the relevant security systems and services to ensure reliability and compliance with established SLAs, handling support tickets, evaluate and track issues to ensure satisfactory resolution, and escalating to higher-tier support teams when needed. 

• As a Security Engineer, you will also be responsible to collaborate on building, supporting, optimizing and operating solutions and integrations for multi-engine malware scanning products, cloud infrastructures, static and dynamic behavior analysis, malware labs, among others. You will also be responsible for providing guidance around secure network communications and general data security initiatives.

Must Have: 

• Customer focus to ensure happy customers

• Adaptability to work in fast pace hyper growth environment

• Able to work collaboratively across diverse engineering teams and products to meet organizational security goals.

• An understanding of threat detection technologies, and able to recommend standard and innovative solutions for protecting against relevant threats surfacing in the ever-changing threat landscape.

• Basic understanding of antimalware products as well as malware types and techniques. 

• A passion around improving security development lifecycle and delivering security guidance to engineers in language they understand.

What we are looking for: 

• Experienced in engineering and/or supporting solutions for each of the following:

  • Cloud-based solutions and infrastructure

  • Multi-Engine Malware Scanning systems

  • Malware scanning products, techniques and technologies

  • Engineering and troubleshooting of YARA pattern matching rules

  • Scripting (Python, PowerShell, etc.)

  • API Integrations

  • RDS Databases

  • Basic systems and service dashboard monitoring

• Familiarity with malware types and families. 

• Familiarity with secure software build & release processes and best practices. 

• Scripting skills, i. e. Python, Powershell, Bash

• Experience in building security automation

• Demonstrated ability to work with engineers to identify the tradeoffs of different solutions.

• Experience and have functional understanding of one or more public cloud providers

• Experience with public cloud infrastructure security protections and weaknesses

• Familiarity with compliance and security requirements and an ability to translate these to product requirements.

• Strong working knowledge of software engineering and architecture, web applications, Windows Server & Linux.

• Years of experience: