> Markdown version of [/jobs/ext/1964057-senior-security-analyst](https://www.wearedevelopers.com/jobs/ext/1964057-senior-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Analyst - **Company:** Zoom Video Communications, Inc. - **Location:** New York, NY, United States (Remote available) - **Experience:** Expert - **Salary:** $87,600.0 - $186,000.0 - **Contract:** Permanent contract - **Skills:** Bash Shell, Apache Lucene, Cyber Security, Computer Programming, Intrusion Detection and Prevention, Python (Programming Language), Windows PowerShell, Kusto Query Language, Software Engineering, SQL Databases, Data Logging, Scripting, Large Language Models, Cyber Threat Analysis, Data Management, Golang - **Published:** August 7, 2026 - **Apply:** https://www.juju.com/job/00000000gm0kap ## About the Role + Have 2 - 4 years of experience working in a Security Operations Center and/or Incident Response role. + Have 2+ years of experience in a technical role (IT, Networking, Software Engineering, Systems Administration, etc.). + Possess a proven track record of building effective automation solutions, which will be critical for success and advancement in this role. You will contribute significantly to both deterministic automation (traditional if/then scripts) and our cutting-edge agentic, LLM-powered auto-triage framework. Have good programming or scripting skills (Python, Go, PowerShell, Bash, or similar). + Be natural curiosity combined with a thoughtful investigative mindset and eagerness to continuously learn and grow. + Have hands-on query-building experience with security data platforms (SPL, KQL, Lucene, CQL, SQL, etc.). ## Description We are seeking a talented Senior Security Analyst to investigate cybersecurity events and incidents at Zoom. This is a unique opportunity that combines hands-on security operations with automation engineering, offering a clear path to transition into a full-time automation engineer role. This shift-based position requires working from 8:00 AM to 6:00 PM EST, Tuesday through Friday or Wednesday through Saturday. About the Team The Detection and Response (D&R) team at Zoom safeguards the company's systems and information to protect our customers, partners, and employees. We assess business risk and counter potential threats through both proactive and reactive measures. D&R encompasses Cyber Threat Intelligence, Security Logging, Detection Engineering, the Security Operations Center (SOC), and Incident Response. Responsibilities + Triaging, investigating, and escalating cybersecurity events across Zoom's environment, determining root causes and implementing preventive measures. + Transforming thorough analysis into repeatable automation, scaling the team's output and impact, which is a core focus of the role. + Collaborating closely with the D&R team to support our Incident Response service and enhance our security posture. + Providing investigative support during active cybersecurity incidents. + Developing and implementing new processes, procedures, and automated workflows as identified by D&R and SOC leadership to enhance Zoom's monitoring, detection, and mitigation capabilities. + Responding to security events reported by internal and external teams, escalating incidents according to Zoom's incident response plan. + Assisting with threat containment and participate in remediation activities during and after incidents. + Maintaining awareness of the global threat landscape through close partnership with Zoom's Threat Intelligence team. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)