Principal Security Engineer

Responsibilities:

• Define and drive Zillow's information security strategy and roadmap across products, platforms, and infrastructure in partnership with senior engineering and business leaders.
• Lead the design and implementation of enterprise security architectures, including identity and access management, network and application security, data protection, and cloud security controls.
• Anticipate, assess, and mitigate complex, ambiguous security risks by guiding threat modelling, vulnerability management, and incident response practices across teams.
• Influence senior stakeholders and cross-functional partners to embed security-by-design into product development lifecycles, engineering standards, and operating processes.
• Mentor and coach security and engineering professionals, building security capabilities, sharing best practices, and fostering a culture of continuous security improvement.
• Evaluate and introduce emerging security technologies, patterns, and industry practices, providing data-driven recommendations that balance security, usability, and speed of delivery.

Requirements:

• Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering, or a related field.
• 10+ years of progressive experience in information security, cybersecurity engineering, or a closely related technical security role.
• Demonstrated experience leading enterprise-level security initiatives or programs, influencing senior technical and business stakeholders.
• Track record of designing and implementing security architectures or controls for large-scale, cloud-based or distributed systems.
• Experience guiding or participating in incident response, threat modelling, or vulnerability management activities in complex environments.
• Experience mentoring other security or engineering professionals and driving cross-functional security improvements.