Senior Security Engineer, AI Governance

What You Can Expect As a Senior Security Engineer on Zoom's Enterprise Security team, you will own the AI Governance program end to end, defining the technical standards and risk posture that determine how Zoom adopts AI safely and at scale. On any given day, you will be assessing emerging AI use cases, building security frameworks for GenAI and agentic systems, and serving as the trusted technical voice on AI security for engineering and enterprise stakeholders across four critical domains. This is a hands-on, highly autonomous role that calls for real depth in both AI/ML systems and security engineering; candidates without working familiarity with how modern AI introduces security risk will not be set up for success here. You will work as part of a globally distributed, multi-domain security engineering team, collaborating closely with colleagues across time zones and contributing across adjacent security domains beyond AI. About the Team Zoom's Enterprise Security team is the engineering foundation behind how the company identifies, contains, and gets ahead of risk across its most critical systems. Working across AI, data, network, endpoint, and cloud security, the team builds the controls, standards, and architectures that let Zoom move quickly without creating unacceptable exposure. As Zoom deepens its investment in AI across Zoom Workplace and its broader platform, this team's work is increasingly central to how the company grows responsibly. Responsibilities Own the AI governance risk register and end-to-end assessment methodology across four domains (GenAI, Agentic AI, Shadow AI/Local AI, and AI Gateway/MCP); conduct and review risk evaluations using Likelihood x Impact scoring and drive remediation with owning engineering teams. Identify and prioritize security gaps in GenAI deployments including prompt injection, data leakage, model misuse, and insecure output handling; define monitoring and guardrail requirements for agentic systems operating with significant autonomy and tool access. Lead the Shadow AI governance strategy end to end, from quantifying risk exposure to recommending and operationalizing detection and enforcement controls across the enterprise. Set the security bar for AI gateway and Model Context Protocol (MCP) implementations, including secure configuration, access control frameworks, and governance coverage. Architect reference security patterns for AI adoption (AI gateways, MCP servers, agent frameworks, LLM integrations) and serve as design authority in AI-related architecture reviews; translate the AI Governance Risk Charter into a concrete roadmap of technical requirements and measurable outcomes. Drive evaluations of AI security tooling (AI gateways, CASB/SWG, agentic monitoring, MCP governance solutions), including POC design, cost-benefit analysis, and leadership recommendations; author and maintain security standards and policy for AI adoption.