Posted today · be early
Senior Security Engineer, AI Governance
Zoom Communications, Inc.
IndiaremotePosted today
Z
Skill Required
Security-EngineerAI-Governance-EngineerAI-Security-EngineerGenAI-Security-EngineeringCloud-Security-EngineerAI EngineerSecurity EngineersecurityAISOCCloud SecurityGenerative AICybersecurityEngineeringObservabilitydesigningbuildingdesignCloudDesign PatternsandMachine LearningFulltime
Key highlights
- 8+ years of security engineering or cybersecurity experience
- Owns end-to-end AI Governance program
- Globally distributed, multi-domain team
- Structured hybrid work approach
- Strong working knowledge of modern AI/ML systems required
- Experience securing GenAI/LLM-based apps is a differentiator
Role overview
As a Senior Security Engineer on Zoom's Enterprise Security team, you will own the AI Governance program end to end, defining the technical standards and risk posture that determine how Zoom adopts AI safely and at scale. This is a hands-on, highly autonomous role that requires deep expertise in AI/ML systems and security engineering, involving collaboration across a globally distributed, multi-domain security engineering team.
Responsibilities
- Own the AI governance risk register and end-to-end assessment methodology across four domains (GenAI, Agentic AI, Shadow AI/Local AI, and AI Gateway/MCP); conduct and review risk evaluations using Likelihood x Impact scoring and drive remediation with owning engineering teams.
- Identify and prioritize security gaps in GenAI deployments including prompt injection, data leakage, model misuse, and insecure output handling; define monitoring and guardrail requirements for agentic systems operating with significant autonomy and tool access.
- Lead the Shadow AI governance strategy end to end, from quantifying risk exposure to recommending and operationalizing detection and enforcement controls across the enterprise.
- Set the security bar for AI gateway and Model Context Protocol (MCP) implementations, including secure configuration, access control frameworks, and governance coverage.
- Architect reference security patterns for AI adoption (AI gateways, MCP servers, agent frameworks, LLM integrations) and serve as design authority in AI-related architecture reviews; translate the AI Governance Risk Charter into a concrete roadmap of technical requirements and measurable outcomes.
- Drive evaluations of AI security tooling (AI gateways, CASB/SWG, agentic monitoring, MCP governance solutions), including POC design, cost-benefit analysis, and leadership recommendations; author and maintain security standards and policy for AI adoption.
- Lead security architecture reviews and risk assessments across adjacent domains including Network, Endpoint, Cloud, and Data Security; contribute to incident response, detection engineering, and purple team exercises as shared team functions.
- Serve as the primary technical partner to AI/ML, engineering, and enterprise teams; lead cross-functional working groups, mentor engineers on risk analysis and documentation quality, and deliver clear reporting on AI risk posture and forecasted challenges to leadership.
Requirements
- 8+ years of security engineering or cybersecurity experience, including end-to-end ownership of a security domain or program, with a track record of driving risk assessment, prioritization, and remediation across cross-functional teams.
- Solid working knowledge of modern AI/ML systems and the security risks they introduce (LLMs, generative AI, agentic systems).
- Understanding of AI gateways, Model Context Protocol (MCP), CASB/SWG, or DLP tooling, and a working understanding of shadow AI detection and governance strategies.
- Working knowledge across core security domains (network, endpoint, cloud, and data security) sufficient to independently lead architecture reviews and risk assessments outside of AI.
- Experience designing security reference architectures or serving as a design authority in complex, cross-functional technical environments.
- Demonstrated ability to influence senior stakeholders, communicate risk clearly in writing and verbally, and drive alignment across engineering, product, and enterprise teams without direct authority.
- Comfort operating in a globally distributed team with regular overlap with US Pacific hours; ability to work with high autonomy and produce clear, actionable risk documentation for leadership audiences.
Nice to have
- Direct experience securing GenAI or LLM-based applications in an enterprise environment.
- Threat modeling experience applied to AI or novel technology stacks.
Benefits
- Benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work-life balance; and contribute to their community.
Additional details
- Zoom's Enterprise Security team works across AI, data, network, endpoint, and cloud security to build controls, standards, and architectures.
- Structured hybrid approach centered around offices and remote work environments; work style is indicated in the job posting.
- Accommodations available for candidates with qualifying medical disabilities via an Accommodations Request Form.
- Interviews are supported by BrightHire and may include recordings.
