Senior Security Engineer - Cloud

About Compass Compass is a real estate technology company with a powerful end-to-end platform that supports the entire buying and selling workflow. We deliver an incomparable experience to both agents and their clients all in service of the Compass mission: to help everyone find their place in the world. Founded in 2012 by Ori Allon and Robert Reffkin, Compass operates in 22+ regions across the United States including New York, Los Angeles and Orange County, Chicago, San Francisco, Boston, Washington D.C., South Florida, The Hamptons, Santa Barbara & Montecito, San Diego, Seattle & Eastside, Philadelphia, Connecticut, Westchester, Aspen, Boulder, Denver, Atlanta, Austin & Central Texas, Dallas-Fort Worth, Houston, Nashville, and Lake Tahoe. Learn more and find your place at www.compass.com and www.compass.com/careers. Compass only reaches out to applicants from a @compass.com domain and does not prompt applicants to download software or files as part of its application process.

Compass

C

compass.com/careers

1,001-5,000 employees

Real Estate

New York, NY

Public Company

390k LinkedIn followers

Raised $2.6B

• We are hands-on security engineers helping to build secure, resilient, and
• scalable web apps, mobile apps, and platform for the real estate industry.  We
• work with a diverse set of teams to provide and support transparent and
• automated security tooling and services. We architect secure web products,
• perform simulated attacks, identify weaknesses, and work with teams to remediate
• and protect our products.  You will lead our effort to build security as a
• service to drive safe-by-default environments and drive customer trust.
• This role blends strategic partnership, hands-on engineering, infrastructure
• security, and automation.
• Empower engineers with safe-by-default tooling, ensuring engineering velocity
• by automating security requirements and building robust guardrails.
• Design and implement scalable systems and controls to secure our cloud
• infrastructure effectively.
• Collaborate closely with engineering and security teams to drive the
• deployment of critical security enhancements and control changes across our
• cloud infrastructure.
• Build enduring, high-trust partnerships with colleagues across the
• Engineering organization.
• Assist in investigating and responding to security events, then work with
• teams to guide and improve their security practices.
• Conduct security assessments for third-party integrations and emerging AI
• tools, ensuring that business productivity does not compromise data integrity
• or compliance.

Required

• Automation is your default approach to security. You understand the unique
• challenges of securing systems at scale and consistently leverage automation
• to solve them.
• You possess a proactive mindset, adept at identifying and resolving security
• gaps or inefficiencies through innovative automation and tooling.
• Expertise in securing cloud platforms, particularly AWS and Azure.
• Strong analytical and problem-solving skills, with the ability to critically
• and objectively assess complex security risks.
• Excited to collaborate with cross-functional teams to build secure, reliable,
• and scalable systems.
• You can clearly communicate complex security vulnerabilities and remediation
• techniques to diverse audiences.
• You are comfortable guiding and educating development teams to achieve
• stronger security outcomes.
• Experience with threat modeling and architectural review processes; you have
• a track record of identifying potential attack vectors early in the
• development lifecycle.
• Experience: At least 5+ years of experience in a security-related role, with
• at least 2+ years specifically focused on cloud security.
• Strong understanding of cloud platforms and security features, particularly
• AWS (IAM, EC2, VPC, container services like ECR, ECS, and EKS), with
• foundational knowledge of Azure and/or GCP
• Strong understanding of Azure services and how to secure them.
• Proven experience with a CNAPP or similar cloud security tool (e.g., Wiz,
• Orca Security, Lacework, Upwind).
• Proficiency in at least one programming language (e.g., Python, Go) for
• automation.
• Knowledge of core security principles such as the principle of least
• privilege, defense-in-depth, and security monitoring.
• Familiarity with containerization technologies (Docker) and orchestration
• platforms (Kubernetes).

Preferred

• Experience with GCP, OCI and multi-cloud networks and infrastructure,
• especially when designing cloud-agnostic systems.

• The base pay range for this position is $175,000 - $196,000; however, base pay
• offered may vary depending on job-related knowledge, skills, and experience.
• Bonuses and restricted stock units may be provided as part of the compensation
• package, in addition to a full range of benefits. Base pay is based on market
• location. Minimum wage for the position will always be met.
• Participation in our incentive programs (which may include eligible cash,
• equity, or commissions). Plus paid vacation, holidays, sick time, parental
• leave, and recharge leave; medical, tele-health, dental and vision benefits;
• 401(k) plan; flexible spending accounts (FSAs); commuter program; life and
• disability insurance; Maven (a support system for new parents); Carrot
• (fertility benefits); UrbanSitter (caregiver referral network); Employee
• Assistance Program; and pet insurance.
• Do your best work, be your authentic self.
• At Compass, we believe that everyone deserves to find their place in the world —
• a place where they feel like they belong, where they can be their authentic
• selves, where they can thrive.  Our collaborative, energetic culture is grounded
• in our Compass Entrepreneurship Principles and our commitment to diversity,
• equity, inclusion, [https://www.compass.com/diversity-inclusion/] growth and