Director OF Information Security

Job Description Senior Director of Information Security reports directly to the VP, CISO and is responsible for the strategy, execution, and maturity of four core security functions: Cyber Defense (SOC & Security Engineering), Threat Intelligence, Application Security, and Security Architecture. This leader will oversee managers and senior technical talent, define multi-year security roadmaps, own security tooling and budget strategy, and play a key role in shaping the overall risk posture and security investments. The ideal candidate is a hands‑on security leader with roots in software or security engineering who has successfully scaled security organizations within fast‑growing technology companies. They possess the technical credibility to engage senior engineers, recruit top‑tier security talent, and influence executive stakeholders on security and business risk. Success in this role requires balancing engineering velocity with strong security outcomes while partnering closely with Product, Platform Engineering, Legal, Privacy, and Compliance teams. The Information Security is an engineering‑first security organization protecting one of the most‑visited real estate platforms in the U.S. The team secures the systems, applications, and data that power millions of real estate transactions while enabling innovation across the business. Rather than acting as gatekeepers, security engineers operate as embedded partners to product and platform teams, building and automating security capabilities that scale with the business. Security is treated as a product feature, integrated seamlessly into cloud‑native infrastructure, modern application development, threat detection, and risk management practices. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to View email address on click.appcast.io. To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: Skills and Requirements 12+ years of progressive cybersecurity experience, including 5+ years in senior leadership managing managers and multi‑functional security teams, ideally within a high‑growth consumer technology or fintech environment. Strong foundation in security engineering, software development, or platform engineering with the technical depth to engage credibly with principal engineers and architects. Proven ability to lead multiple security functions simultaneously, including SOC, detection engineering, application security, and security architecture, while scaling teams effectively. Demonstrated success building and leading Application Security programs that are deeply integrated into SDLC, CI/CD pipelines, and developer workflows. Deep expertise in cloud security, preferably AWS, including Infrastructure as Code (Terraform/CloudFormation), Kubernetes and container security, and Zero Trust architectures. Strong detection engineering background with experience evolving security operations from alert triage to custom detections, SOAR automation, and threat‑driven security coverage. Ability to translate security risks into business and financial impact and effectively communicate with executive leadership and board‑level stakeholders. Recognized leader with a track record of attracting, mentoring, and developing top‑tier security engineering talent. Extensive knowledge of modern security technologies including SIEM, SOAR, DLP, EDR, EPM, CSPM/CWPP, SAST, DAST, IaC, and container security, with a strategic approach to tool consolidation and optimization. Proficiency in Python, Go, or similar programming languages, with the ability to review automation scripts, detection logic, and security tooling developed by engineering teams. #J-18808-Ljbffr