About the role
Responsibilities:
- Define and drive Zillow's information security strategy and roadmap across products, platforms, and infrastructure in partnership with senior engineering and business leaders.
- Lead the design and implementation of enterprise security architectures, including identity and access management, network and application security, data protection, and cloud security controls.
- Anticipate, assess, and mitigate complex, ambiguous security risks by guiding threat modelling, vulnerability management, and incident response practices across teams.
- Influence senior stakeholders and cross-functional partners to embed security-by-design into product development lifecycles, engineering standards, and operating processes.
- Mentor and coach security and engineering professionals, building security capabilities, sharing best practices, and fostering a culture of continuous security improvement.
- Evaluate and introduce emerging security technologies, patterns, and industry practices, providing data-driven recommendations that balance security, usability, and speed of delivery.
Requirements:
- Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering, or a related field.
- 10+ years of progressive experience in information security, cybersecurity engineering, or a closely related technical security role.
- Demonstrated experience leading enterprise-level security initiatives or programs, influencing senior technical and business stakeholders.
- Track record of designing and implementing security architectures or controls for large-scale, cloud-based or distributed systems.
- Experience guiding or participating in incident response, threat modelling, or vulnerability management activities in complex environments.
- Experience mentoring other security or engineering professionals and driving cross-functional security improvements.