What You Can ExpectAs a Principal Security Engineer on Zoom's Enterprise Security team, you will own the AI Governance program end to end, defining the technical standards and risk posture that determine how Zoom adopts AI safely and at scale. On any given day, you will be assessing emerging AI use cases, building security frameworks for GenAI and agentic systems, and serving as the trusted technical voice on AI security for engineering and enterprise stakeholders across four critical domains. This is a hands-on, highly autonomous role that calls for real depth in both AI/ML systems and security engineering; candidates without working familiarity with how modern AI introduces security risk will not be set up for success here. You will work as part of a globally distributed, multi-domain security engineering team, collaborating closely with colleagues across time zones and contributing across adjacent security domains beyond AI.
About the TeamZoom's Enterprise Security team is the engineering foundation behind how the company identifies, contains, and gets ahead of risk across its most critical systems. Working across AI, data, network, endpoint, and cloud security, the team builds the controls, standards, and architectures that let Zoom move quickly without creating unacceptable exposure. As Zoom deepens its investment in AI across Zoom Workplace and its broader platform, this team's work is increasingly central to how the company grows responsibly.
Responsibilities- Own the AI governance risk register and end-to-end assessment methodology across four domains (GenAI, Agentic AI, Shadow AI/Local AI, and AI Gateway/MCP); conduct and review risk evaluations using Likelihood x Impact scoring and drive remediation with owning engineering teams.
- Identify and prioritize security gaps in GenAI deployments including prompt injection, data leakage, model misuse, and insecure output handling; define monitoring and guardrail requirements for agentic systems operating with significant autonomy and tool access.
- Lead the Shadow AI governance strategy end to end, from quantifying risk exposure to recommending and operationalizing detection and enforcement controls across the enterprise.
- Set the security bar for AI gateway and Model Context Protocol (MCP) implementations, including secure configuration, access control frameworks, and governance coverage.
- Architect reference security patterns for AI adoption (AI gateways, MCP servers, agent frameworks, LLM integrations) and serve as design authority in AI-related architecture reviews; translate the AI Governance Risk Charter into a concrete roadmap of technical requirements and measurable outcomes.
- Drive evaluations of AI security tooling (AI gateways, CASB/SWG, agentic monitoring, MCP governance solutions), including POC design, cost-benefit analysis, and leadership recommendations; author and maintain security standards and policy for AI adoption.
- Lead security architecture reviews and risk assessments across adjacent domains including Network, Endpoint, Cloud, and Data Security; contribute to incident response, detection engineering, and purple team exercises as shared team functions.
- Serve as the primary technical partner to AI/ML, engineering, and enterprise teams; lead cross-functional working groups, mentor engineers on risk analysis and documentation quality, and deliver clear reporting on AI risk posture and forecasted challenges to leadership.
What We're Looking For- 10+ years of security engineering or cybersecurity experience, including end-to-end ownership of a security domain or program, with a track record of driving risk assessment, prioritization, and remediation across cross-functional teams.
- Solid working knowledge of modern AI/ML systems and the security risks they introduce (LLMs, generative AI, agentic systems); direct experience securing GenAI or LLM-based applications in an enterprise environment is a strong differentiator.
- Understanding of AI gateways, Model Context Protocol (MCP), CASB/SWG, or DLP tooling, and a working understanding of shadow AI detection and governance strategies.
- Working knowledge across core security domains (network, endpoint, cloud, and data security) sufficient to independently lead architecture reviews and risk assessments outside of AI.
- Experience designing security reference architectures or serving as a design authority in complex, cross-functional technical environments; threat modeling experience applied to AI or novel technology stacks is a plus.
- Demonstrated ability to influence senior stakeholders, communicate risk clearly in writing and verbally, and drive alignment across engineering, product, and enterprise teams without direct authority.
- Comfort operating in a globally distributed team with regular overlap with US Pacific hours; ability to work with high autonomy and produce clear, actionable risk documentation for leadership audiences.
Ways of WorkingOur structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In-Person is indicated in the job description/posting.
BenefitsAs part of our award-winning workplace culture and commitment to delivering happiness, our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work-life balance; and contribute to their community in meaningful ways. Click Learn for more information.
About UsZoomies help people stay connected so they can get more done together. We set out to build the best collaboration platform for the enterprise, and today help people communicate better with products like Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars.
We're problem-solvers, working at a fast pace to design solutions with our customers and users in mind. Find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment.
Our CommitmentAt Zoom, we believe great work happens when people feel supported and empowered. We're committed to fair hiring practices that ensure every candidate is evaluated based on skills, experience, and potential. If you require an accommodation during the hiring process, let us know-we're here to support you at every step.
If you need assistance navigating the interview process due to a medical disability, please submit an Accommodations Request Form and someone from our team will reach out soon. This form is solely for applicants who require an accommodation due to a qualifying medical disability. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed.
Our interviews are supported by BrightHire, a tool that helps us create a consistent and thoughtful interview experience and may include recordings. Please refer to our candidate privacy statement for more information of how we use your data.
#LI-Remote
