Senior Security Engineer - Compliance Operations

Company: Zillow
Location: Kalamazoo
Posted on: June 4, 2025

Job Description:

Join our team as a versatile and hardworking Senior Cloud Security Engineer. This role presents an excellent opportunity to contribute to the security and reliability of our cloud infrastructure and web applications. Your responsibilities will include implementing outstanding security measures, adhering to standard processes in secure code development, and optimizing the performance and scalability of our applications. Collaborate with development, operations, and security teams to successfully deploy solutions that safeguard our systems from threats and vulnerabilities.
Our team plays a crucial role in Zillow's security operations, responsible for protecting critical perimeter defense systems, including anti-bot technologies and AWS Shield. We coordinate the secure configuration of a wide range of web products, guaranteeing flawless performance and strong defense. Our goal is to strengthen the security of the CI/CD pipeline, finding the right balance between agility and resilience in a constantly changing tech environment. Teleworkers do not have a permanent corporate office workplace and, instead, work from a physical location of their choice which must be identified to the Company. Employees may live in any part of Mexico, but preferably in Mexico City, as we would encourage attendance for occasional in-office events.
In addition to a competitive base salary and benefits, this position is also eligible for equity awards based on factors such as experience, performance and location.
Strong understanding of AWS architecture and services, with hands-on experience in AWS WAF, Shield, CloudFront, IAM, VPC, GuardDuty, Kinesis, Cloud Trail, Security Hub, KMS, Athena, Lambda, Step Functions, etc.
Proficient developer skills in Python, Java, Golang, and Bash, with experience writing and running SQL queries.
Practical experience with bot detection and mitigation technologies, web security standard methodologies (SSL/TLS, security headers), and CDN/DNS security.
Deep knowledge of the OWASP Top 10 vulnerabilities and experience mitigating threats like SQL injection, XSS, CSRF, and others.
Proven experience securing CI/CD pipelines, integrating security testing tools, and managing secret management solutions.
Familiarity with secure coding standards, static and multifaceted analysis tools, and role-based access control (RBAC) principles.
Familiarity with cloud security tools and platforms, particularly those used for monitoring, compliance, and threat detection within cloud environments.
AWS certification (Solutions Architect, Security Specialty, or DevOps Engineer) is helpful.
Experience working in Agile or DevOps environments.
As the most-visited real estate website in the United States, Zillow - and its affiliates help movers find and win their home through digital solutions, first class partners, and easier buying, selling, financing and renting experiences. Millions of people visit Zillow Group sites every month to start their home search, and now they can rely on Zillow to help make it easier to move. The work we do is helping people move from dreaming to transacting - and no matter what job you're in, you will play a critical role in making this vision a reality.
We're also setting the standard for work experiences of the future, where our employees are supported in doing their best work and living a flexible, well-balanced life. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, and gender identity. If you have a disability or special need that requires accommodation, please contact your recruiter directly.
Q ualified applicants with arrest or conviction records will be considered for employment in accordance with applicable state and local law.

Keywords: Zillow, Battle Creek , Senior Security Engineer - Compliance Operations, Engineering , Kalamazoo, Michigan