We are seeking a talented Senior Security Analyst to investigate cybersecurity events and incidents at Zoom. This is a unique opportunity that combines hands-on security operations with automation engineering, offering a clear path to transition into a full-time automation engineer role. This shift-based position requires working from 8:00 AM to 6:00 PM EST, Tuesday through Friday or Wednesday through Saturday.

About the Team

The Detection and Response (D&R) team at Zoom safeguards the company's systems and information to protect our customers, partners, and employees. We assess business risk and counter potential threats through both proactive and reactive measures. D&R encompasses Cyber Threat Intelligence, Security Logging, Detection Engineering, the Security Operations Center (SOC), and Incident Response.

Responsibilities

• Triaging, investigating, and escalating cybersecurity events across Zoom's environment, determining root causes and implementing preventive measures.

• Transforming thorough analysis into repeatable automation, scaling the team's output and impact, which is a core focus of the role.

• Collaborating closely with the D&R team to support our Incident Response service and enhance our security posture.

• Providing investigative support during active cybersecurity incidents.

• Developing and implementing new processes, procedures, and automated workflows as identified by D&R and SOC leadership to enhance Zoom's monitoring, detection, and mitigation capabilities.

• Responding to security events reported by internal and external teams, escalating incidents according to Zoom's incident response plan.

• Assisting with threat containment and participate in remediation activities during and after incidents.

• Maintaining awareness of the global threat landscape through close partnership with Zoom's Threat Intelligence team.

What we’re looking for

• Have 2 - 4 years of experience working in a Security Operations Center and/or Incident Response role.

• Have 2+ years of experience in a technical role (IT, Networking, Software Engineering, Systems Administration, etc.).

• Possess a proven track record of building effective automation solutions, which will be critical for success and advancement in this role. You will contribute significantly to both deterministic automation (traditional if/then scripts) and our cutting-edge agentic, LLM-powered auto-triage framework. Have good programming or scripting skills (Python, Go, PowerShell, Bash, or similar).

• Be natural curiosity combined with a thoughtful investigative mindset and eagerness to continuously learn and grow.

• Have hands-on query-building experience with security data platforms (SPL, KQL, Lucene, CQL, SQL, etc.).