The leading real estate marketplace. Search millions of for-sale and rental listings, compare Zestimate® home values and connect with local professionals.
About the role
As Director of Information Security, drive the strategy, execution, and maturity Application Security, and Security Architecture and our India Security Team. This is an M5 leadership role that reports directly to the VP, Information Security , and carries significant accountability for the security posture, talent, and engineering culture of a large, multi-function organization.
What they're looking for
- Proven track record in Application Security leadership at scale—specifically, building AppSec programs that integrate natively into SDLC, CI/CD, and developer workflows inside technology-forward organizations
- Deep expertise in multi cloud security (AWS preferred), including IaC security (Terraform/CloudFormation), Kubernetes/container security, and Zero Trust architecture patterns
- Strong detection engineering mindset: experience moving a SOC from alert triage to custom detection pipelines, SOAR automation, and threat-model-driven coverage
- Ability to quantify and communicate security risk in business and financial terms, experience presenting to executive leadership and, ideally, board-level audiences
- Talent magnet: a reputation for hiring and developing elite security engineers, with the technical credibility to attract senior ICs who could work anywhere
- Familiarity with the modern security tooling ecosystem: SIEM, SOAR, DLP,EDR, EPM, CSPM/CWPP ,SaST /DaST. IAC, and container security - with the judgment to rationalize and consolidate rather than accumulate
More about this role
Zillow’s Information Security team is the engineering-first security organization at the heart of one of the most-visited real estate platforms in the United States. We protect a product ecosystem that drives real estate transactions, safeguards the personal and financial data of millions of customers, and powers a marketplace that is reimagining what it means to come home.
We operate like a product engineering team- we build, automate, and ship. Our security engineers are embedded partners to the product and platform organizations, not gatekeepers. We move fast, we prefer paved roads over guard rails, and we treat security as a feature of the product rather than a tax on it. Our work spans cloud-native infrastructure at scale, a high-velocity application development lifecycle, real-time threat detection and response, and a threat intelligence program that informs both defensive and product risk decisions across the company.
This is a team where technical credibility matters. Our leaders write strategy documents and review detection logic and SDLC security controls. If you’ve spent your career building things - secure software, detection pipelines, AppSec programs, zero trust...
Browse similar: Startup jobs · Remote jobs