Principal Security Engineer

• Lead security assessments for high-impact applications and services, including threat modeling, secure design reviews, and penetration testing
• Identify, validate, and prioritize complex vulnerabilities across web applications, APIs, and cloud-native services, and partner with engineers to drive secure-by-default outcomes
• Strengthen the security of primarily AWS-based environments, with additional exposure to GCP and Azure, across areas such as identity, networking, data protection, and service integrations
• Drive AI security initiatives by establishing guardrails, review practices, and secure design patterns for AI-enabled features and systems
• Assess AI-specific risks, including data exposure, misuse, model abuse, prompt-based attacks, and unintended system behavior
• Develop and promote scalable application and AI security standards, best practices, and guardrails across teams
• Improve application and AI security tooling through configuration, integration, and ongoing optimization in partnership with engineering and platform teams
• Mentor and influence engineers across teams, raising the technical bar and helping embed security into the way Zillow builds and ships software

• 7+ years of security engineering experience, including strong experience in application security and ownership of complex security outcomes
• experience driving or owning AI security initiatives and assessing or mitigating risks in AI- or LLM-enabled systems
• experience leading advanced security assessments across modern applications, cloud infrastructure, and AI-enabled systems
• strong understanding of common vulnerability classes, secure software development practices, and threat modeling
• hands-on experience securing cloud-native environments, especially AWS, and designing secure system or cloud architectures
• can read, write, and review code in at least one modern programming language
• communicates security risks clearly to both technical and non-technical partners and can influence decisions without formal authority
• experience mentoring engineers and helping raise the technical bar across a team or organization

equity awards