Director, Application Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Zillow security director leading Application Security and Security Architecture for a major U.S. real estate platform. Driving secure software, cloud security, and executive risk strategy.
Responsibilities:
- Lead and develop a multi-manager organization across Application Security and Security Architecture
- Establish and execute a 2–3-year strategic roadmap aligned with product and platform engineering priorities
- Own workforce planning, organizational design, talent acquisition, and development of future security leaders
- Manage budget, tooling portfolio, and vendor relationships
- Represent Application Security at executive and leadership levels and translate technical risk into business impact
- Lead an AppSec organization partnering with product engineering
- Build security capabilities into CI/CD pipelines, frameworks, and developer tooling
- Create security enablement programs, secure coding training, and internal tooling
- Ensure application portfolio coverage including secure design review, DAST/SAST integration, dependency management, and API security
- Own product security strategy and embed security in product design
- Build and maintain a vulnerability management program with SLAs, risk-based prioritization, and executive reporting
- Establish enterprise security patterns, reference architectures, and guardrails for cloud-native AWS-centric infrastructure
- Drive Zero Trust principles and identity-driven access
- Embed security patterns into infrastructure-as-code and platform primitives
- Partner in platform and product design reviews
- Evaluate emerging threats and technology shifts and evolve controls
Requirements:
- 12+ years of progressive security experience
- At least 5 years in leadership roles managing managers and multifunctional security teams
- Experience in a high-growth consumer technology or fintech company strongly preferred
- Background in security engineering, software development, or platform engineering
- Experience owning multiple security domains simultaneously
- Track record building Application Security programs integrated into SDLC, CI/CD, and developer workflows
- Deep expertise in multi-cloud security, preferably AWS
- Experience with IaC security using Terraform or CloudFormation
- Kubernetes and container security knowledge
- Zero Trust architecture experience
- Detection engineering experience, including custom detection pipelines, SOAR automation, and threat-model-driven coverage
- Ability to quantify and communicate security risk in business and financial terms
- Experience presenting to executive leadership and ideally board-level audiences
- Experience hiring and developing elite security engineers
- Familiarity with SIEM, SOAR, DLP, EDR, EPM, CSPM/CWPP, SAST/DAST, IaC, and container security tooling
- Proficiency in at least one scripting or programming language such as Python or Go
Benefits:
- Equity awards based on experience, performance, and location
- Remote work from a physical location of the employee’s choice
- Flexible work from wherever employees are most productive through Cloud HQ
- Equal employment opportunity and accommodation support
Similar Jobs
Information Security Consultant – SOC IR L3
Information Security Consultant leading complex cyber incident investigations for Eurofins, an international life sciences and laboratory testing company. Strengthening SOC capabilities through forensics, remediation, and response coordination.
SAP Basis Consultant, Security Consultant
SAP Basis and Security Consultant managing administration, performance, authorizations, and compliance for enterprise SAP landscapes. Supporting upgrades, migrations, and cloud transformation projects.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer managing endpoint, SIEM, vulnerability, and cloud security for clients. Securing AI systems through authorization, monitoring, and adversarial testing.
Senior Product Security Engineer – AI, DevSecOps
Senior Product Security Engineer securing McKesson’s healthcare software and AI systems. Designing cloud, CI/CD, and DevSecOps controls for resilient products.
Security Engineer, IAM
Analista de Segurança IAM administrando identidades, permissões e controles Cloud/SaaS no Jusbrasil. Protegendo dados jurídicos e apoiando o crescimento seguro da plataforma.
Director, Physical Security Solutions
Director leading ANM’s physical security and low-voltage infrastructure solutions organization. Driving multi-state delivery operations, financial performance, client experience, and team development.
Enterprise Security Architect – Senior
Enterprise Security Architect securing DHS ICAM applications and services. Integrating controls, supporting ATO activities, remediating vulnerabilities, and managing POA&Ms for federal environments.
Insider Risk Security Engineer
Insider Risk Security Engineer strengthening Zscaler’s cloud security platform against insider threats. Leading detection engineering, investigations, and defensible playbooks across enterprise security operations.
Senior Electronic Security Engineer
Senior Electronic Security Engineer designing, integrating, and sustaining electronic security systems for Cambridge’s U.S. government defense and security missions. Fully remote with customer-site travel.
Staff Security Engineer
Staff Security Engineer securing cloud applications and AI/LLM systems at Robots & Pencils. Defining architecture, threat defenses, automation, and production security standards.
Senior Security Engineer
Senior Security Engineer leading architecture, authorization, and remediation for Latitude’s federal health supply-chain software. Fully remote within the United States.
Security Engineer
Security Engineer securing supply-chain and logistics software for a federal health customer. Designing controls, integrating pipeline security, and validating safe releases.
Administrative Support Assistant – Security Systems Industry
Remote administrative assistant supporting a security systems company with phone calls, inspection reports, scheduling, CRM setup, and social media support. Structured role working under office-manager direction.
Security Engineer
Security Engineer strengthening 11:11 Systems’ global SOC through SIEM, SOAR, and incident-response engineering. Supporting customer security operations, detection improvements, and escalations.
Security Engineer
Security Engineer strengthening 11:11 Systems' global SOC through SIEM, SOAR, and incident response. Supporting customer escalations, detection engineering, automation, and 24/7 security operations.
Security Engineer
Security Engineer operating 11:11 Systems’ global SOC. Building SIEM/SOAR detections, supporting incident response, and improving customer security operations.
Senior Specialist, Microsoft Cloud & Security
Especialista sênior projetando e sustentando ambientes Microsoft 365, Azure e identidade híbrida. Protegendo dados, resolvendo incidentes críticos e conduzindo projetos corporativos.
Information Security Access Specialist
Information Security Access Specialist securing employee access for GR8_TECH’s B2B iGaming platforms. Automating IAM workflows, RBAC governance, and AI-assisted access operations.
Application Security Consultant
Application Security Consultant assessing customer applications for vulnerabilities at DirectDefense, a cybersecurity services provider. Conducting dynamic testing, static code reviews, and remediation guidance.
Information Security Consultant
Information Security Consultant delivering GRC assessments, frameworks, and compliance advisory for Cognisys clients. Translating security requirements into practical improvements across diverse industries.