Senior Security Analyst

Location: Overland Park, Kansas, United States

What you can expect

We are seeking a talented Senior Security Analyst to investigate cybersecurity events and incidents at Zoom. This is a unique opportunity that combines hands-on security operations with automation engineering, offering a clear path to transition into a full-time automation engineer role.

About the Team

The Detection and Response (D&R) team at Zoom safeguards the company’s systems and information to protect our customers, partners, and employees. We assess business risk and counter potential threats through both proactive and reactive measures. D&R encompasses Cyber Threat Intelligence, Security Logging, Detection Engineering, the Security Operations Center (SOC), and Incident Response.

Responsibilities

• Triaging, investigating, and escalating cybersecurity events across Zoom’s environment, determining root causes and implementing preventive measures.
• Transforming thorough analysis into repeatable automation, scaling the team’s output and impact, which is a core focus of the role.
• Collaborating closely with the D&R team to support our Incident Response service and enhance our security posture.
• Providing investigative support during active cybersecurity incidents.
• Developing and implementing new processes, procedures, and automated workflows as identified by D&R and SOC leadership to enhance Zoom’s monitoring, detection, and mitigation capabilities.
• Responding to security events reported by internal and external teams, escalating incidents according to Zoom’s incident response plan.
• Assisting with threat containment and participating in remediation activities during and after incidents.
• Maintaining awareness of the global threat landscape through close partnership with Zoom’s Threat Intelligence team.

Requirements

• 2 – 4 years of experience working in a Security Operations Center and/or Incident Response role.
• 2 years of experience in a technical role (IT, Networking, Software Engineering, Systems Administration, etc.).
• Proven track record of building effective automation solutions, which will be critical for success and advancement in this role. You will contribute significantly to both deterministic automation (traditional if/then scripts) and our cutting-edge agentic, LLM-powered auto-triage framework.
• Good programming or scripting skills.

Schedule

This shift-based position requires working from 8:00 AM to 6:00 PM EST, Tuesday through Friday or Wednesday through Saturday.