Information Security Cyber Defense Incident Responder

About the role

Zillow Group's Cyber Defense team owns security monitoring, detection engineering, incident response, and vulnerability management across our environment. Zillow Group is a strategic, mission-driven organization focused on delivering exceptional experiences and measurable outcomes.

What you'll do

• Command cross-functional response efforts, lead investigations with a team from detection through post-mortem, and mentor other analysts
• Participate in on-call response for critical security incidents, making timely and sound decisions without requiring escalation for direction
• Conduct forensic analysis of compromised systems across Linux, macOS, Windows, and cloud environments, preserving evidence and documenting decisions
• Handle SOC alert queue and routine tickets as needed, providing senior-level judgment on triage and escalation decisions
• Perform deep-dive investigations across host, network, identity, and cloud evidence sources

What you need

• Incident response
• SIEM
• Linux
• Cloud security
• IAM
• EDR

Good to have

• CISSP
• Splunk
• Python
• AWS
• Bash
• PowerShell