Security Operations Engineer

• Description:
  • Zoomies help the world connect — and deliver happiness while doing it. We set out to build the best video conferencing product for the enterprise, and today help people communicate better with products like Zoom Phone, Zoom Rooms, Zoom Video Webinars, Zoom Apps, and OnZoom.
  • We’re problem-solvers and self-starters, working at a fast pace to design solutions with our customers and users in mind. Here, you’ll work across teams to dig deep into impactful projects that are changing the way people communicate, and enjoy opportunities to advance your career in a diverse, inclusive environment.
  • At Zoom, we are seeking a Tier 1 Support Analyst / Engineer to join the Security Services team. This role will be instrumental in supporting critical security functions and services that help Zoom release and deploy secure products. These include in-house built systems for Digital Signing, and threat detection like malware scanning, vulnerability and suspicious behavior detection.
• **As a Support Analyst / Engineer, you will be supporting our Product Engineering and Release Management teams during critical phases of our build and release process. This involves monitoring the relevant security systems and services to ensure reliability and compliance with established SLAs, handling support tickets, evaluate and track issues to ensure satisfactory resolution, and escalating to higher-tier support teams when needed.
• **As a Security Engineer (Cryptography Operations), you will be responsible for building, supporting, and operating solutions that includes PKI (Public Key Infrastructure), KMS (Key Management Services), Code Signing, Secrets Management and Hardware Security Module (HSM). You will also be responsible for providing guidance around secure network communications and general data security initiatives.
• Must Have:
  • Customer focus to ensure happy customers
  • Adaptability to work in fast pace hyper growth environment
  • Able to work collaboratively across diverse engineering teams and products to meet organizational security goals.
  • An understanding of cryptography and able to recommend standard solutions for protecting data at rest and in storage, transport and identity purposes
  • Basic understanding of antimalware products as well as malware types and techniques.
  • A passion around improving security development lifecycle and delivering security guidance to engineers in language they understand.
• What we are looking for:
  • Experienced in engineering and supporting solutions for each of the following:
    • Public Key Infrastructure (Internal and Internet)
    • Hardware Security Modules (Thales, SafeNet, etc.)
    • PKI Operations
      • Certificate Management (Intake, Deployments, monitoring, automation, risk reviews).
      • Ceremonies
      • Risk Reviews
    • TLS/SSL
    • Key Management
    • Cryptography Algorithms
    • Code Signing
    • Multi-Engine Malware Scanning systems
    • Scripting (Python, PowerShell, etc.)
    • API Integrations
    • Basic Dashboard Monitoring
  • Experience in building security automation
  • Experience and have functional understanding of one or more public cloud providers
  • Experience with public cloud infrastructure security protections and weaknesses
  • Scripting skills, i. e. Python, Perl, Powershell, Bash
  • Demonstrated ability to work with engineers to identify the tradeoffs of different solutions.
  • Familiarity with compliance and security requirements and an ability to translate these to product requirements.
  • Strong working knowledge of software engineering and architecture, web applications, linux, HTTP, TLS.
  • Strong grasp of practical cryptography usage, able to recommend the best approach for storage, transport and identity purposes.
  • Years of experience?

Ways of Working
Our structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In-Person is indicated in the job description/posting.

Benefits
As part of our award-winning workplace culture and commitment to delivering happiness, our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work-life balance; and contribute to their community in meaningful ways. Click Learn for more information.

About Us
Zoomies help people stay connected so they can get more done together. We set out to build the best collaboration platform for the enterprise, and today help people communicate better with products like Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars.
We’re problem-solvers, working at a fast pace to design solutions with our customers and users in mind. Here, you’ll work across teams to deliver impactful projects that are changing the way people communicate and enjoy opportunities to advance your career in a diverse, inclusive environment.

Our Commitment​
We believe that the unique contributions of all Zoomies is the driver of our success. To make sure that our products and culture continue to incorporate everyone's perspectives and experience we never discriminate on the basis of race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. Zoom is proud to be an equal opportunity workplace and is an affirmative action employer. All your information will be kept confidential according to EEO guidelines.

We welcome people of different backgrounds, experiences, abilities and perspectives including qualified applicants with arrest and conviction records and any qualified applicants requiring reasonable accommodations in accordance with the law.

If you need assistance navigating the interview process due to a medical disability, please submit an Accommodations Request Form and someone from our team will reach out soon. This form is solely for applicants who require an accommodation due to a qualifying medical disability. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed.