Principal Applications Security Architect

Team: Information Security

Summary:

ZoomInfo is seeking a seasoned, business-minded Enterprise Security Architect to define and advance the security architecture that protects our corporate systems, data, and applications at scale.

This principal-level role will serve as a senior technical authority across the company, translating business strategy, customer commitments, regulatory requirements, and evolving threats into pragmatic, scalable security architecture. The Enterprise Security Architect will partner closely with IT, Business Systems, Legal, Privacy, Engineering, and Security teams to embed security into enterprise technology decisions from strategy through implementation.

The ideal candidate combines deep hands-on security expertise with enterprise architecture leadership, strong executive communication skills, and the ability to influence technical direction across a complex, cloud-first environment.

What You Will Do

• Architectural Review: Conduct in-depth security reviews of new and existing systems, analyzing everything from network topology and data flows to authentication methods and cloud service configurations.
• Threat Modeling: Lead and perform threat modeling exercise to proactively identify and mitigate design-level security flaws before they reach production.
• Pattern & Standard Development: Design, document, and build reusable security patterns, reference architectures, and technical standards for critical areas like cloud infrastructure, API security, and data protection.
• Technical Consultation: Serve as a deep subject matter expert for engineering and IT teams, providing clear, actionable guidance on how to implement security controls and build secure solutions.
• Technology Evaluation: Research, prototype, and evaluate emerging security technologies and tools to determine their technical merit and potential value to the company.

What You Will Bring

• Experience: 12+ years of experience in information security, with a strong background in security engineering or architecture in a cloud-native environment (AWS, GCP).
• Technical Expertise: Deep, hands-on knowledge across multiple security domains, including endpoint, network, application, and identity security.
• Architectural Skill: The ability to analyze complex, distributed systems, identify risks, and design effective, scalable security controls.
• Collaboration: A proven ability to work effectively with other engineers and technical teams. You can engage in constructive technical debate, build consensus, and partner with others to solve problems.
• Clear Communication: The ability to document and explain complex technical concepts clearly and concisely to both technical and non-technical audiences.
• Problem-Solving: A pragmatic and analytical approach to solving complex technical challenges.
• Helpful Bonus Skills: Proficiency with Infrastructure as Code (e.g., Terraform), scripting (e.g., Python), and advanced security certifications (e.g., CISSP, GIAC).

#LI-SG2

#LI-Hybrid