Director, Application Security

Zillow

Confirmed live yesterday High trust
Remote

Quick summary

Work type
Remote
Location
Remote
Salary
$220,200–$351,800 / yr
Employment
Full-time
Posted
10 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $202k
This role $286k
$130k most similar roles pay here $376k

This role pays more than 89% of similar roles. Most pay $166,590–$238,300 — the shaded band above. At the midpoint, this role pays about $286k versus about $202k for comparable roles.

Based on 240 similar postings.

Employer

About Zillow

Zillow Group is a leading real estate and rental marketplace providing consumers with data, tools, and services to find, buy, sell, rent, and finance homes, and connecting buyers with agents and lenders. Industry: Real Estate Technology & Marketplace

Zillow currently has 33 open roles on FindRole.

Listed pay typically runs $160,900–$257,100 across 25 roles with salary data.

Most-posted roles

View all roles at Zillow

At a glance

TL;DR · Director, Application Security

Director, Application Security leads a multi-manager organization focused on application security and security architecture within an engineering-first information security team. This leader manages teams of managers and senior individual contributors to drive the strategy, execution, and maturity of security programs. The role involves building "paved road" security capabilities integrated into CI/CD pipelines, managing the tooling portfolio, and establishing enterprise security patterns for cloud-native infrastructure. Key responsibilities include overseeing vulnerability management, promoting a developer-first culture through secure coding training, and ensuring comprehensive coverage of the application portfolio via DAST, SAST, and API security. The role requires expertise in AWS, Terraform, CloudFormation, Kubernetes, and Zero Trust principles. Candidates must be proficient in Python or Go to review automation and detection logic while translating complex technical risks into business impact for executive leadership.

What you'll do

  • Lead a multi-manager organization across Application Security and Security Architecture to drive technical strategy and team culture.
  • Develop and execute a multi-year security roadmap aligned with product engineering priorities rather than just compliance.
  • Manage the operational budget, tooling portfolio, and vendor relationships with a focus on automation and consolidation.
  • Build "paved road" security capabilities integrated into CI/CD pipelines to make the secure path easy for developers.
  • Oversee comprehensive application security coverage including design reviews, DAST/SAST integration, and API security.
  • Establish enterprise security patterns and Zero Trust principles for cloud-native infrastructure.
  • Translate complex technical risks into business impact for executive leadership and stakeholders.
  • Recruit and develop a high-performing team of senior engineers and future security leaders.

What we're looking for

  • 12+ years of progressive security experience is required.
  • At least 5 years of leadership experience managing managers and multi-functional security teams is required.
  • Experience in a high-growth consumer technology or fintech company is preferred.
  • Must have technical roots in security engineering, software development, or platform engineering.
  • Proven track record in Application Security leadership at scale within technology-forward organizations.
  • Deep expertise in multi-cloud security (AWS preferred), including IaC, Kubernetes/container security, and Zero Trust architecture.
  • Proficiency in at least one scripting or programming language such as Python or Go is required.
  • Ability to quantify and communicate technical risk in business and financial terms for executive leadership.

More like this

Similar roles

Director AI and Security Architect

Blackrock

New York, NY +1 16 days ago $215,000–$275,000
LLM RAG AI Security cloud-native CI/CD AWS Azure GCP Threat Modeling Application Security Product Security Cloud Security Security Architecture Automation
10+ yrs exp Hybrid

Head of Application Security

Analog Devices

Wilmington, MA 39 days ago $219,200–$301,400
DevSecOps SAST SCA DAST CI/CD SBOM LLM NIST AI RMF ISO/IEC 42001 OWASP LLM Top 10 MITRE ATLAS PSIRT CVE CVSS IEC 62443 ISO/SAE 21434 ISO 26262 IEC 62304 CMMC ITAR EAR
10+ yrs exp

Director, Product Security

Green Dot Corp

Los Angeles, CA +4 21 days ago
Application Security SAST DAST CI/CD Security Architecture Mobile Security DevOps Cybersecurity Product Security
8+ yrs exp Hybrid

Director, Product Security

Green Dot Corp

Los Angeles, CA +4 21 days ago
Application Security SAST DAST CI/CD Security Architecture Mobile Security DevOps Product Security Cybersecurity
8+ yrs exp Hybrid

Director, Security Architecture

Cardinal Health

23 days ago $154,400–$261,250
Security Architecture NIST CSF ISO 27001 SABSA TOGAF CISSP CCSP DevSecOps Cloud Security Risk Management Incident Response Disaster Recovery Secure Design Data Security
10+ yrs exp

Director Security Cloud Solution Architect

Microsoft

Redmond, WA 32 days ago $130,900–$251,900
Microsoft Sentinel Microsoft Defender for Cloud Defender for Endpoint Defender for Office Defender for Identity Entra ID Purview Data Security SIEM XDR Cloud Security Data Loss Prevention (DLP) Information Rights Management (IRM) Azure Cybersecurity Security Architecture
10+ yrs exp Hybrid