Director, Application Security
$220.2k - $351.8kZillow Group
- # Director, Application SecurityApply: Remote: Remote-USA: Full time: Posted Yesterday: P751400## About the teamZillow’s Information Security team is the engineering-first security organization at the heart of one of the most-visited real estate platforms in the United States. We protect a product ecosystem that drives real estate transactions, safeguards the personal and financial data of millions of customers, and powers a marketplace that is reimagining what it means to come home. We operate like a product engineering team- we build, automate, and ship. Our security engineers are embedded partners to the product and platform organizations, not gatekeepers. We move fast, we prefer paved roads over guard rails, and we treat security as a feature of the product rather than a tax on it. Our work spans cloud-native infrastructure at scale, a high-velocity application development lifecycle, real-time threat detection and response, and a threat intelligence program that informs both defensive and product risk decisions across the company. This is a team where technical credibility matters. Our leaders write strategy documents and review detection logic and SDLC security controls. If you’ve spent your career building things - secure software, detection pipelines, AppSec programs, zero trust architectures -this is the kind of organization you’ve been building toward.## About the roleAs Director of Information Security, drive the strategy, execution, and maturity Application Security, and Security Architecture and our India Security Team. This is an M5 leadership role that reports directly to the VP, Information Security , and carries significant accountability for the security posture, talent, and engineering culture of a large, multi-function organization. We are looking for a builder, someone who has led application security organizations inside high-growth technology companies where engineering velocity is a first-class value. You have a background that started in software engineering or security engineering, and you’ve never fully left it behind. You are the leader who can earn trust with a senior engineers and peers, recruit principal-level security engineers, and then go present business risk. You will manage a team of managers and senior individual contributors across your four domains, partnering deeply with Platform Engineering, Product, Legal, Privacy, and Compliance. You will set multi-year technical roadmaps, own the operational budget and tooling strategy for your org, and serve as a key voice in defining the company’s overall security risk posture and investment priorities. ResponsibilitiesLeadership & Organizational Strategy* Lead and develop a multi-manager organization across Application Security, and Security Architecture, setting clear direction, healthy team culture, and high-performance expectations at every level.* Establish and execute a 2–3-year strategic roadmap for your domains that is tightly coupled to Zillow’s product and platform engineering priorities, not just industry compliance frameworks.* Own workforce planning, org design, talent acquisition, and the development of a bench of future security leaders—with a specific focus on recruiting and retaining engineers who want to build, not just advise.* Manage budget, tooling portfolio, and vendor relationships across your scope, with a bias toward consolidation, automation ROI, and eliminating tool sprawl.* Represent Application Security at the executive and leadership level; translate complex technical risk into business impact for the VP Application Security* Lead an AppSec organization that partners with product engineering rather than policing it—building “paved road” security capabilities embedded in CI/CD pipelines, frameworks, and developer tooling.* Drive a developer-first security culture: create security enablement programs, secure coding training, and internal tooling that make the secure path the easy path for Zillow’s engineers.* Ensure comprehensive coverage of Zillow’s application portfolio including secure design review, DAST/SAST integration, dependency management, and API security.* Own product security strategy, ensuring that security is a design-time consideration in new product features, not an audit checkpoint at the end of the SDLC.* Build and maintain a vulnerability management program with clear SLAs, risk-based prioritization, and executive-facing reporting. Security Architecture* Partner with the Security Architecture function to establish and maintain enterprise security patterns, reference architectures, and guardrails for Zillow’s cloud-native, AWS-centric infrastructure.* Drive Zero Trust principles and identity-driven access across the environment, working with Platform Engineering to embed security patterns into infrastructure-as-code and platform primitives.* Ensure security architecture is a proactive partner in platform and product design reviews, providing clear, opinionated guidance that accelerates rather than slows engineering delivery.* Maintain a forward-looking architecture posture: evaluate emerging threats and technology shifts (e.g., AI/ML-driven attack surfaces, cloud configuration risk) and evolve controls accordingly.This role has been categorized as a Remote position. “Remote” employees do not have a permanent corporate office workplace and, instead, work from a physical location of their choice, which must be identified to the Company. U.S. employees may live in any of the 50 United States, with limited exceptions.In California, Connecticut, Maryland, Massachusetts, New Jersey, New York, Washington state, and Washington DC the standard base pay range for this role is $220,200.00 - $351,800.00 annually. This base pay range is specific to these locations and may not be applicable to other locations.In Colorado, Hawaii, Illinois, Maine, Minnesota, Nevada, Ohio, Rhode Island, Vermont, and Virginia the standard base pay range for this role is $209,200.00 - $334,200.00 annually. The base pay range is specific to these locations and may not be applicable to other locations.In addition to a competitive base salary this position is also eligible for equity awards based on factors such as experience, performance and location. Actual amounts will vary depending on experience, performance and location. Employees in this role will not be paid below the salary threshold for exempt employees in the state where they reside.## Who you are* 12+ years of progressive security experience, with at least 5 years in leadership roles managing managers and multi-functional security teams; prior experience in a high-growth consumer technology or fintech company is strongly preferred.* Roots in security engineering, software development, or platform engineering—you have built things, not just governed them, and your technical instincts remain sharp enough to engage credibly with principal engineers and architects.* Demonstrated experience owning multiple security domains simultaneously (e.g., SOC/detection, AppSec, architecture) with the organizational maturity to drive excellence across each without personally bottlenecking any of them.* Proven track record in Application Security leadership at scale—specifically, building AppSec programs that integrate natively into SDLC, CI/CD, and developer workflows inside technology-forward organizations.* Deep expertise in multi cloud security (AWS preferred), including IaC security (Terraform/CloudFormation), Kubernetes/container security, and Zero Trust architecture patterns.* Strong detection engineering mindset: experience moving a SOC from alert triage to custom detection pipelines, SOAR automation, and threat-model-driven coverage.* Ability to quantify and communicate security risk in business and financial terms; experience presenting to executive leadership and, ideally, board-level audiences.* Talent magnet: a reputation for hiring and developing elite security engineers, with the technical credibility to attract senior ICs who could work anywhere.* Familiarity with the modern security tooling ecosystem: SIEM, SOAR, DLP,EDR, EPM, CSPM/CWPP ,SaST /DaST. IAC, and container security - with the judgment to rationalize and consolidate rather than accumulate.* Proficiency in at least one scripting or programming language (Python, Go, or similar); sufficient to review automation, detection logic, and security tooling code written by your team.
- J-18808-Ljbffr Zillow Group
Vacancy posted 1 day ago
Similar jobs that could be interesting for youBased on the Director, Application Security in Eastern, KY vacancy
$219k - $240k
If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation... ...weighing at least 35 kg. Summary of Position: The Director, Systems Architecture, Planning & Security is responsible for designing, securing, and...ApplicationFull timeWork at officeLocal area$180k - $210k
...headquartered in New York City with offices around the world. To learn more, go to . About the Role We’relooking for a Director of Application Security to architect and lead an AI-native, agent-driven Application Security function at Zeta. This is a hands-on, player/...ApplicationContract workFor contractorsFor subcontractorWork at officeLocal areaWork visaShift work- Vertex Inc. seeks a Senior Director of Product Security Engineering to lead and advance our enterprise Product Security program across software engineering, application security, and secure software development practices. In this role you will partner with Engineering,...Application
- ...the place for you. What You’ll Own Define Exa’s company-wide security strategy, operating model, risk framework, and multiyear roadmap... ...incidents. Own corporate security, including endpoints, SaaS applications, employee access, security awareness, insider risk, physical-security...ApplicationH1b
AI Chopping Block
Eastern, KY4 days ago $124.77k - $171.56k
...accounting, operations, human resources, legal, IT, information security, facilities, marketing, and communications.**Responsibilities:... ...for experience.* Extensive experience with graphics design application programs and Microsoft Office Suite.* Advanced Skills in Adobe...ApplicationPermanent employmentFull timeWork experience placementWork at officeSierra Nevada Corporation
Eastern, KY4 days ago- ...software for law firms, and the Information Security team protects the systems, data, and... ...s global environment. Reporting to the Director, Head of Information Security, this... ...infrastructure, endpoints, containers, and applications, including risk-based prioritization...Application
Aderant
Eastern, KY1 day ago - ...Cybersecurity team protects the trust of over 200 million athletes by securing our platform, our data, and the systems our community depends... ..., enterprise networking, email, collaboration platforms, SaaS applications, and third-party integrations. Develop and execute...ApplicationWork at officeFlexible hours3 days per week
TOGETHXR
Eastern, KY1 day ago - ...The Manager, Information Security leads Jewelers Mutual's security engineering and operations function, overseeing information security... ...the CISO, CIO, IT infrastructure, DevOps, cloud engineering, application teams, and GRC to strengthen security controls, mature...ApplicationContract workWork experience placement
Jewelers Mutual Insurance Company
Eastern, KY4 days ago - ...skills: as a Senior Data Scientist, you are expected to be able to create projects from scratch and have a deep understanding of application architecture. ~ Clear and effective communication in English — advanced ability to discuss business tasks, justify decisions, and...ApplicationFull timeRemote work
Lemon Inc
Eastern, KY1 day ago $172k - $237k
...long-term success in mind every step of the way. As Manager, Security Operations, you will defend our infrastructure, SaaS, and... ...adversaries. Own the security of our corporate systems (SaaS applications and endpoints) including configuration hardening and vulnerability...ApplicationWork at officeRemote workWork from homeFlexible hoursForward Financing
Eastern, KY4 days ago- ...Security and trust are fundamental to Medplum. We operate critical healthcare infrastructure, store and process sensitive health information... ...Work directly with Medplum's engineering team on application security, cloud security, authentication and authorization, tenant...ApplicationFlexible hours
Medplum
Eastern, KY3 days ago $200k
...Building an impressive demo is easy. Building an AI agent that can securely take action inside enterprise systems is hard. The moment an... ...CTO led the vector database team at Redis, shipped 100+ LLM applications, and is a contributor to LangChain and LlamaIndex. He knows...ApplicationShift workArcade
Eastern, KY3 days ago- ...expanding, with a strong focus on automation, data reliability, security, and reducing manual operational processes. About the role:... ...management, and access controls. Maintain automations as applications, systems, and interfaces change. Replace manual spreadsheet...ApplicationRemote work
ByteHire
Eastern, KY4 days ago - ...implemented, considering transaction volume, latency, resiliency, security, connector availability, operational ownership,... ...with the ERP Engineer, Business Analysts, Power BI Engineer, Application Support, vendors, and business stakeholders to define source and...ApplicationWork experience placement
PowerGrid Services, LLC
Eastern, KY1 day ago - ...mining principles: predictive analytics, mapping, collective data from multiple data systems Expert knowledge in Microsoft Office applications with specific experience in Excel (i.e. pivot tables, advanced functions, formulas, filtering, etc.) 3. BS in Mathematics with 3...ApplicationWork experience placementWork at office
Lamwork
Eastern, KY2 days ago $165k - $185k
...'re the person who keeps that platform fast, reliable, and secure. As Director of DevOps, Security & IT, you'll own how jrni builds, runs,... ...Coordinate breach notification with Legal and the DPO where applicable. Maintain a risk register and lead periodic enterprise...ApplicationRemote workJRNI
Eastern, KY1 day ago- ## Director Of Security OperationsApply: Hybrid: OH - Columbus - Dublin: OH - Cleveland: Full time: Posted Yesterday: REQ2445As BWE’s Director... ...architecture standards for cloud, SaaS, infrastructure, applications, and data platforms, and define security-by-design requirements...ApplicationFull timeH1bWork at office
BWE , Inc.
Eastern, KY3 days ago $110.29k - $148.89k
...solutions, tested leadership, and trusted results to enable national security missions worldwide. Job Description SOSi is seeking a... ...installing, updating and monitoring server and hosted applications including network-attached clients, user/service accounts and...ApplicationContract workWorldwideNight shiftSmartRecruiters
Eastern, KY12 hours ago- ...in building out a mature, right-sized information security program to protect patient data, clinical operations... ...day to day. You will partner closely with the Director, IT Infrastructure & Cloud, Director – Applications, and Data Analytics teams to ensure security is embedded...ApplicationFull timeTemporary workImmediate start
Qualderm
Eastern, KY1 day ago - ..., Rafay is helping organizations turn increasingly complex infrastructure into a scalable foundation for the next generation of applications and AI services. The Opportunity We are looking for a Lead Technical Support Engineer to join our growing support organization...Application
Rafay Systems
Eastern, KY4 days ago - ...contract position based in O'Fallon, Missouri. This role focuses on full-stack Java development, cloud-native architecture, and the application of AI and generative AI tools in modern software engineering. Responsibilities Design and develop full-stack Java...ApplicationContract work
Intone Inc
Eastern, KY12 hours ago $130k - $170k
...development, and maintenance of our corporate and product‑focused web applications and websites. You will leverage your expertise in modern web... ..., including PHP and JavaScript frameworks, to build secure, reliable, responsive, and user‑focused digital experiences used...ApplicationLocal areaWorldwideTP-Link NA
Eastern, KY4 days ago- ...post-sales teams. Demo Development: Build and modify demo applications using AI-assisted development tools to showcase product... ...software development lifecycle, cloud infrastructure, and basic security concepts. Broad AI/LLM Understanding: You understand how...ApplicationWork at officeHome office
Maven AGI, Inc.
Eastern, KY4 days ago - ...enabling innovation? Join our team and be the driving force behind a secure and resilient enterprise. We’re seeking a strategic and hands-... ...review and advise on technical architectures (cloud, network, application, and endpoint) for security risks.* Experience supporting...ApplicationFull timeWork at officeFlexible hours3 days per week
Insitu
Eastern, KY1 day ago - ...Plan, design, and coordinate small to large-scale software application projects. Translate concepts and develop rapid proof of concepts... ...to prioritize development projects and ensure consistency in security, performance, manageability, and quality across the software...ApplicationFull timeWork experience placementWork at office
Jobs2Web
Eastern, KY4 days ago $106k - $152k
...systems. Audit and manage role-based access control (RBAC), security groups, and identity governance policies. Manage and... ...are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive...ApplicationWork at officeRemote work2 days per weekAnaplan
Eastern, KY4 days ago- ...Enterprise IT services company who focuses on designing, building, securing, and operating cutting‑edge software solutions that drive... ...secure software distribution. Engineer integrations for mission applications, middleware, network solutions and C2 toolsets (e.g.,...ApplicationPermanent employmentFull timeTemporary workFor subcontractorLocal areaImmediate startRemote workFlexible hours
Planned Systems International
Eastern, KY4 days ago - ...As a Full Stack Developer you'll be tasked with working on web application development in JavaScript. Working within the software... ...routing, data storage, design patterns, optimization, caching, security) ~ Fundamental knowledge of core web principals ( the DOM, SSL...ApplicationWork from home1 day per week
your Jared
Eastern, KY1 day ago $125k - $135k
...If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative... ...storage, networking, IAM, backups, resource optimization, and security best practices Oversee network infrastructure including LAN...ApplicationFull timeCasual workWork at officeNight shift3 days per weekSOA
Eastern, KY4 days ago- ...LLC, a Koniag Government Services company, is seeking a Senior Security Manager with a Secret security clearance to support KITS and... ...cybersecurity services in alignment with DoW requirements and applicable federal standards. Produce and maintain cybersecurity guidance...ApplicationLocal areaFlexible hours
Koniag Services, Inc.
Eastern, KY4 days ago
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Director, Application Security. Be the first to apply!
Related searches
- program manager with security clearance Eastern, KY
- security operations manager Eastern, KY
- physical security manager Eastern, KY
- director information security Eastern, KY
- corporate security manager Eastern, KY
- security manager Eastern, KY
- surveillance manager Eastern, KY
- security engineering manager Eastern, KY
- director global security Eastern, KY
- security systems manager Eastern, KY