# Director, Application Security at Zillow

- Company: Zillow
- What the company does: The leading real estate marketplace. Search millions of for-sale and rental listings, compare Zestimate® home values and connect with local professionals.
- Company website: https://www.zillow.com
- Type: Startups
- Level: Principal and up
- Location: Remote-USA
- Work setup: Remote
- Posted: 2026-09-22
- Apply by: 2026-11-06
- Apply: https://zillow.wd5.myworkdayjobs.com/en-US/Zillow_Group_External/job/Remote-USA/Director--Application-Security_P751400-1
- Page: https://www.1752.vc/careers/jobs/zillow-director-application-security/

## About the role

As Director of Information Security, drive the strategy, execution, and maturity Application Security, and Security Architecture and our India Security Team. This is an M5 leadership role that reports directly to the VP, Information Security , and carries significant accountability for the security posture, talent, and engineering culture of a large, multi-function organization.

## What they're looking for

- Proven track record in Application Security leadership at scale—specifically, building AppSec programs that integrate natively into SDLC, CI/CD, and developer workflows inside technology-forward organizations
- Deep expertise in multi cloud security (AWS preferred), including IaC security (Terraform/CloudFormation), Kubernetes/container security, and Zero Trust architecture patterns
- Strong detection engineering mindset: experience moving a SOC from alert triage to custom detection pipelines, SOAR automation, and threat-model-driven coverage
- Ability to quantify and communicate security risk in business and financial terms, experience presenting to executive leadership and, ideally, board-level audiences
- Talent magnet: a reputation for hiring and developing elite security engineers, with the technical credibility to attract senior ICs who could work anywhere
- Familiarity with the modern security tooling ecosystem: SIEM, SOAR, DLP,EDR, EPM, CSPM/CWPP ,SaST /DaST. IAC, and container security - with the judgment to rationalize and consolidate rather than accumulate