1 day ago
London, United KingdomSenior
Responsibilities
- Conduct security assessments, code reviews, and penetration testing for web applications, APIs, mobile applications, and AWS infrastructure.
- Identify, prioritize, and remediate vulnerabilities across the Workvivo platform in partnership with security, infrastructure, and application engineering teams.
- Perform threat modeling and risk assessments for new security features during the design phase.
- Improve the software development lifecycle through DAST, SAST, SCA, secure coding guidance, and automated security controls.
- Build and introduce automated security solutions.
- Contribute to engineering security training and collaborate with Bug Bounty, Incident Response, SOC, Vulnerability Management, and Customer Security Assurance teams.
- Analyze external vulnerability and penetration-testing reports and provide security guidance to technical and non-technical stakeholders.
Requirements
- Significant experience conducting penetration tests focused on web applications, APIs, and mobile applications.
- Experience in application security, software development, or a related area, with knowledge of secure coding practices and application security frameworks.
- Ability to critically analyze vulnerability and penetration-testing reports and distinguish meaningful risks from low-value findings.
- Ability to create architectural diagrams focused on the security control plane.
- Good knowledge of AWS.
- Experience with Burp Suite, Invicti/Netsparker, or similar security tooling.
- Programming proficiency in one or more languages such as PHP, Laravel, Go, Java, or C++.
- Knowledge of security tools such as Burp Suite and OWASP ZAP, plus familiarity with security protocols and encryption methods.
- Strong attention to detail, curiosity, focus, and written and verbal communication skills.
Benefits
- Benefits support physical, mental, emotional, and financial health, work-life balance, and community involvement.
- The company uses a structured hybrid approach centered on office and remote work environments; the posting is marked #LI-Remote.
- Interview accommodations are available for applicants with qualifying medical disabilities.
About Zoom
Zoom builds a cloud platform for video meetings, team chat, webinars, phone, rooms, and contact center used by businesses, schools, and public-sector organizations. It sells these collaboration and communications services as SaaS subscriptions with add-ons for events, telephony, and enterprise features, and offers developer APIs/SDKs. Founded in 2013 and headquartered in San Jose, California, Zoom Video Communications is a public company traded on Nasdaq.