What You Can ExpectThis role sits at the intersection of offensive security and applied AI, focused on surfacing critical risks across Zoom's products, applications, services, and infrastructure before they become incidents. Day to day, you will combine deep target knowledge, threat analysis, and cutting edge models to form hypotheses about where complex systems are likely to fail, validate exploitability, and trace attack paths that standard testing would miss. This is not a vulnerability-scanning or prompt-engineering role: a strong hands-on research craft is the foundation, and success is measured by whether your findings change how Zoom understands its risk, not by finding volume. Research directions are chosen in collaboration with the Security Assurance teams Offensive Security, Vulnerability Management, Bug Bounty, PSIRT, but most work is self-directed, with high autonomy and no predetermined outcome.About the TeamZoom's Offensive Security team conducts vulnerability research across products, applications, and infrastructure, concentrating on high-impact issues that escape standard secure development processes or wouldn't surface through routine testing. The team is actively evolving towards AI-native research, where models extend how much ground experienced security engineers can cover and how quickly, paired with real target knowledge, a sound research strategy, and rigorous verification.ResponsibilitiesLeverage AI to conduct vulnerability research across Zoom's products, applications, services, and infrastructure, with a focus on high-impact issues, subtle vulnerabilities, confirmed exploitability, and attack paths that cross component and trust boundaries.Use experience, threat analysis, architecture knowledge, source code, and observed system behavior to choose targets and guide investigations.Apply frontier and open-weight models, agents, and other AI capabilities across the research lifecycle: reconnaissance, code analysis, hypothesis generation, exp
