Director of AppSec & Security Architecture (Remote)

Zillow Group Inc.; Northern (KY); Hybrid; USD 220,000 - 352,000; Full time

Benefits offered by this job

Equity awards

Job summary

Zillow is seeking a Director of Information Security to lead Application Security and Security Architecture. This remote role reports to the VP of Information Security, driving multi-year roadmaps and embedding security into the SDLC with platform engineering.

The ideal candidate has deep security engineering roots, strong leadership, and a track record delivering secure, scalable security programs in high-growth tech.

Qualifications

• 12+ years of security experience with leadership roles.
• Experience owning multiple security domains (AppSec, SOC, architecture).
• Deep expertise in multi-cloud security (AWS) and IaC security.
• Ability to quantify risk and communicate business impact to executives.

Responsibilities

• Lead and develop a multi-manager AppSec and security-architecture org.
• Set 2–3 year strategic roadmaps aligned to product priorities.
• Own workforce planning, talent acquisition, and leadership development.
• Manage budget, tooling portfolio, and vendor relationships; reduce tool sprawl.
• Partner with product, legal, privacy, and compliance; present risk at executive level.
• Embed security into CI/CD pipelines and developer tooling.
• Build and run vulnerability management with SLAs and risk-based prioritization.

Skills

Security leadership

AppSec leadership

Cloud security

IaC security

Zero Trust

Threat modeling

Executive communication

Python/Go scripting

Tools

SIEM

SOAR

DLP

EDR

CSPM/CWPP

IaC (Terraform/CF)

Kubernetes security

Job description

Zillow is seeking a Director of Information Security to lead Application Security and Security Architecture. This remote role reports to the VP of Information Security, driving multi-year roadmaps and embedding security into the SDLC with platform engineering.

The ideal candidate has deep security engineering roots, strong leadership, and a track record delivering secure, scalable security programs in high-growth tech.