Staff Security Engineer: Secure-by-Design & AI-Driven

Compass; Boston; On-site; PHP 12,923,000 - 14,406,000; Full time

Benefits offered by this job

Incentive programs

Paid vacation

Health benefits

401(k)

FSAs

Parental leave

Job summary

Compass is seeking a Staff Security Engineer to drive automated application security testing, build secure-by-design architectures, and advise product and engineering teams on risk.

You will evangelize security across the organization, foster collaboration with product and engineering, and accelerate security with AI-powered tooling and processes. Join a fast-evolving real estate tech platform committed to security, compliance, and protecting enterprise data as CIH scales globally.

Qualifications

• Bachelor’s degree in Computer Science or related field, or equivalent practical experience.
• 3+ years administering and configuring CI/CD pipeline tools.
• 3+ years configuring and tuning SAST/DAST/SCA security tooling.
• Proficient in Python or Bash scripting for automation.
• Experience with Python/JavaScript/TypeScript/Golang/Java in product development.
• Experience conducting security code reviews for Python/JS/TS/Golang/Java.

Responsibilities

• Automate and scale application security testing within CI/CD pipelines.
• Partner with engineering to ensure secure-by-design architectures.
• Advise product/engineering teams on security risk for new features.
• Advocate for secure-by-design practices across the org.
• Collaborate with Product and Engineering to meet delivery goals securely.
• Drive AI-powered security capabilities and establish AI-SPM standards.

Skills

CI/CD automation

SAST/DAST/SCA

Python scripting

JavaScript/TypeScript

Golang/Java

IaC (Terraform)

AWS

AI in security

Education

Bachelor’s degree in Computer Science or related field

Tools

Terraform

AWS

Job description

Compass is seeking a Staff Security Engineer to drive automated application security testing, build secure-by-design architectures, and advise product and engineering teams on risk.

You will evangelize security across the organization, foster collaboration with product and engineering, and accelerate security with AI-powered tooling and processes. Join a fast-evolving real estate tech platform committed to security, compliance, and protecting enterprise data as CIH scales globally.