Principal Security Engineer

The Principal, Information Security provides expert leadership across Zillow's security landscape, shaping enterprise security strategy, driving the design and implementation of advanced security controls, and partnering with senior technology and business leaders to reduce risk while enabling innovation. This role serves as a subject matter expert on complex and ambiguous security challenges, leading cross-functional efforts to protect Zillow's platforms, data, and customers.

Responsibilities

Define and drive Zillow's information security strategy and roadmap across products, platforms, and infrastructure in partnership with senior engineering and business leaders; Lead the design and implementation of enterprise security architectures, including identity and access management, network and application security, data protection, and cloud security controls; Anticipate, assess, and mitigate complex, ambiguous security risks by guiding threat modeling, vulnerability management, and incident response practices across teams; Influence senior stakeholders and cross-functional partners to embed security-by-design into product development lifecycles, engineering standards, and operating processes; Mentor and coach security and engineering professionals, building security capabilities, sharing best practices, and fostering a culture of continuous improvement in security; Evaluate and introduce emerging security technologies, patterns, and industry practices, providing data-driven recommendations that balance security, usability, and speed of delivery

Requirements

Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering, or a related field; 10+ years of progressive experience in information security, cybersecurity engineering, or a closely related technical security role; Demonstrated experience leading enterprise-level security initiatives or programs, influencing senior technical and business stakeholders; Track record of designing and implementing security architectures or controls for large-scale, cloud-based or distributed systems; Experience guiding or participating in incident response, threat modeling, or vulnerability management activities in complex environments; Experience mentoring other security or engineering professionals and driving cross-functional security improvements; Must live within a reasonable commuting distance of the office

Benefits

Competitive base pay; Incentive compensation