[Hiring] Director of Application Security @Zillow

Role Description

As Director of Information Security, drive the strategy, execution, and maturity of Application Security, and Security Architecture and our India Security Team. This is an M5 leadership role that reports directly to the VP, Information Security, and carries significant accountability for the security posture, talent, and engineering culture of a large, multi-function organization.

We are looking for a builder, someone who has led application security organizations inside high-growth technology companies where engineering velocity is a first-class value. You have a background that started in software engineering or security engineering, and you’ve never fully left it behind. You are the leader who can earn trust with senior engineers and peers, recruit principal-level security engineers, and then go present business risk.

You will manage a team of managers and senior individual contributors across your four domains, partnering deeply with Platform Engineering, Product, Legal, Privacy, and Compliance. You will set multi-year technical roadmaps, own the operational budget and tooling strategy for your org, and serve as a key voice in defining the company’s overall security risk posture and investment priorities.

Responsibilities

• Leadership & Organizational Strategy:
  • Lead and develop a multi-manager organization across Application Security and Security Architecture.
  • Establish and execute a 2–3-year strategic roadmap for your domains.
  • Own workforce planning, org design, talent acquisition, and development of future security leaders.
  • Manage budget, tooling portfolio, and vendor relationships.
  • Represent Application Security at the executive and leadership level.
• Application Security:
  • Lead an AppSec organization that partners with product engineering.
  • Drive a developer-first security culture.
  • Ensure comprehensive coverage of Zillow’s application portfolio.
  • Own product security strategy.
  • Build and maintain a vulnerability management program.
• Security Architecture:
  • Partner with the Security Architecture function to establish enterprise security patterns.
  • Drive Zero Trust principles and identity-driven access.
  • Ensure security architecture is a proactive partner in platform and product design reviews.
  • Maintain a forward-looking architecture posture.

Qualifications

• 12+ years of progressive security experience, with at least 5 years in leadership roles.
• Roots in security engineering, software development, or platform engineering.
• Demonstrated experience owning multiple security domains simultaneously.
• Proven track record in Application Security leadership at scale.
• Deep expertise in multi-cloud security (AWS preferred).
• Strong detection engineering mindset.
• Ability to quantify and communicate security risk in business terms.
• Talent magnet with a reputation for hiring and developing elite security engineers.
• Familiarity with the modern security tooling ecosystem.
• Proficiency in at least one scripting or programming language (Python, Go, or similar).

Benefits

• Competitive base salary.
• Eligible for equity awards based on factors such as experience, performance, and location.

Company Description

At Zillow, we’re reimagining how people move—through the real estate market and through their careers. As the most-visited real estate platform in the U.S., we help people navigate buying, selling, financing, and renting with greater ease and confidence.

Zillow is honored to be recognized among the best workplaces in the U.S. Zillow was named one of FORTUNE 100 Best Companies to Work For® in 2026, and included on TIME’s America’s Best Companies 2026 list.

Zillow Group is an equal opportunity employer committed to fostering an inclusive, innovative environment with the best employees.