Description:

• Zoomies help the world connect — and deliver happiness while doing it. We set out to build the best video conferencing product for the enterprise, and today help people communicate better with products like Zoom Phone, Zoom Rooms, Zoom Video Webinars, Zoom Apps, and OnZoom.

• We’re problem-solvers and self-starters, working at a fast pace to design solutions with our customers and users in mind. Here, you’ll work across teams to dig deep into impactful projects that are changing the way people communicate, and enjoy opportunities to advance your career in a diverse, inclusive environment. 

• At Zoom, we are seeking a Tier 1 Support Analyst / Engineer  to join the Security Services  team.  This role will be instrumental in supporting  critical security functions and services that help Zoom release and deploy secure products. These include in-house built systems for Digital Signing, and threat detection like malware scanning, vulnerability and suspicious behavior detection. 

As a Support Analyst / Engineer, you will be supporting our Product Engineering and Release Management teams during critical phases of our build and release process. This involves monitoring the relevant security systems and services to ensure reliability and compliance with established SLAs, handling support tickets, evaluate and track issues to ensure satisfactory resolution, and escalating to higher-tier support teams when needed. 

As a Security Engineer (Cryptography Operations), you will be responsible for building, supporting, and operating solutions that includes PKI (Public Key Infrastructure), KMS (Key Management Services), Code Signing, Secrets Management and Hardware Security Module (HSM).  You will also be responsible for providing guidance around secure network communications and general data security initiatives.

Must Have:

• Customer focus to ensure happy customers

• Adaptability to work in fast pace hyper growth environment

• Able to work collaboratively across diverse engineering teams and products to meet organizational security goals.

• An understanding of cryptography and able to recommend standard solutions for protecting data at rest and in storage, transport and identity purposes

• Basic understanding of antimalware products as well as malware types and techniques. 

• A passion around improving security development lifecycle and delivering security guidance to engineers in language they understand.

What we are looking for:

• Experienced in engineering and supporting solutions for each of the following:

  • Public Key Infrastructure (Internal and Internet)

  • Hardware Security Modules (Thales, SafeNet, etc.)

  • PKI Operations

    • Certificate Management (Intake, Deployments, monitoring, automation, risk reviews).

    • Ceremonies

    • Risk Reviews

  • TLS/SSL

  • Key Management

  • Cryptography Algorithms

  • Code Signing

  • Multi-Engine Malware Scanning systems

  • Scripting (Python, PowerShell, etc.)

  • API Integrations

  • Basic Dashboard Monitoring

• Experience in building security automation

• Experience and have functional understanding of one or more public cloud providers

• Experience with public cloud infrastructure security protections and weaknesses

• Scripting skills, i. e. Python, Perl, Powershell, Bash

• Demonstrated ability to work with engineers to identify the tradeoffs of different solutions.

• Familiarity with compliance and security requirements and an ability to translate these to product requirements.

• Strong working knowledge of software engineering and architecture, web applications, linux, HTTP, TLS.

• Strong grasp of practical cryptography usage, able to recommend the best approach for storage, transport and identity purposes.

• Years of experience?