Principal Applications Security Architect
Senior security architect on ZoomInfo's Information Security team, defining the security architecture that protects corporate systems, data, and applications at scale. Day to day: conducting security reviews, leading threat modeling, building reusable security patterns and standards, and advising engineering and IT teams in a cloud-first AWS/GCP environment.
- Compensation
- Not disclosed
- Location
- Bengaluru, India
- Work setup
- Onsite
- Seniority
- Principal
- Employment
- Not specified
- Experience
- 12+ years
- Category
- Security
- Posted
Skills
Must have
- 12+ years of experience in information security
- Strong background in security engineering or architecture in a cloud-native environment (AWS, GCP)
- Deep, hands-on knowledge across endpoint, network, application, and identity security domains
- Ability to analyze complex distributed systems, identify risks, and design scalable security controls
- Proven collaboration with engineers and technical teams; constructive debate and consensus building
- Ability to document and explain complex technical concepts to technical and non-technical audiences
- Pragmatic and analytical approach to solving complex technical challenges
Nice to have
- Proficiency with Infrastructure as Code (e.g., Terraform)
- Scripting skills (e.g., Python)
- Advanced security certifications (e.g., CISSP, GIAC)
Full description
ZoomInfo is where careers accelerate. We move fast, think boldly, and empower you to do the best work of your life. You’ll be surrounded by teammates who care deeply, challenge each other, and celebrate wins. With tools that amplify your impact and a culture that backs your ambition, you won’t just contribute. You’ll make things happen–fast.
Team: Information Security
Summary:
ZoomInfo is seeking a seasoned, business-minded Enterprise Security Architect to define and advance the security architecture that protects our corporate systems, data, and applications at scale.
This principal-level role will serve as a senior technical authority across the company, translating business strategy, customer commitments, regulatory requirements, and evolving threats into pragmatic, scalable security architecture. The Enterprise Security Architect will partner closely with IT, Business Systems, Legal, Privacy, Engineering, and Security teams to embed security into enterprise technology decisions from strategy through implementation.
The ideal candidate combines deep hands-on security expertise with enterprise architecture leadership, strong executive communication skills, and the ability to influence technical direction across a complex, cloud-first environment.
What You Will Do
- Architectural Review: Conduct in-depth security reviews of new and existing systems, analyzing everything from network topology and data flows to authentication methods and cloud service configurations.
- Threat Modeling: Lead and perform threat modeling exercise to proactively identify and mitigate design-level security flaws before they reach production.
- Pattern & Standard Development: Design, document, and build reusable security patterns, reference architectures, and technical standards for critical areas like cloud infrastructure, API security, and data protection.
- Technical Consultation: Serve as a deep subject matter expert for engineering and IT teams, providing clear, actionable guidance on how to implement security controls and build secure solutions.
- Technology Evaluation: Research, prototype, and evaluate emerging security technologies and tools to determine their technical merit and potential value to the company.
What You Will Bring
- Experience: 12+ years of experience in information security, with a strong background in security engineering or architecture in a cloud-native environment (AWS, GCP).
- Technical Expertise: Deep, hands-on knowledge across multiple security domains, including endpoint, network, application, and identity security.