Senior Cloud Security Engineer - Automate & Safeguard AWS

Compass Real Estate - Peninsula; New York (NY); On-site; USD 153,000 - 171,000; Full time

Benefits offered by this job

Bonuses and RSUs

Comprehensive benefits

Paid vacation, holidays, sick time

401(k) plan

Commuter program

Pet insurance

Job summary

Compass Security team seeks a seasoned security engineer to blend strategic partnership with hands-on engineering, infrastructure security, and automation. You will automate security requirements, build guardrails, and collaborate across engineering and security teams to deploy critical safeguards.

You will lead threat modeling, secure multi-cloud environments (AWS/Azure/GCP), and assess third-party integrations and AI tools to protect data integrity and compliance.

Qualifications

• At least 5+ years in security, with 2+ years in cloud security.
• Strong understanding of AWS services: IAM, EC2, VPC, ECR, ECS, EKS.
• Foundational knowledge of Azure and/or GCP.
• Experience with CNAPP or similar cloud security tools (Wiz, Orca, Lacework, Upwind).
• Proficiency in Python or Go for automation.
• Knowledge of least privilege, defense-in-depth, and security monitoring.
• Familiar with Docker and Kubernetes.

Responsibilities

• Empower engineers with safe-by-default tooling and automate security requirements.
• Design and implement scalable systems and controls to secure cloud infra.
• Collaborate with engineering and security teams to deploy security enhancements.
• Build enduring partnerships across the Engineering organization.
• Investigate security events and guide teams to improve practices.
• Assess security for third-party integrations and AI tools to protect data integrity.

Skills

Automation

Cloud security

AWS

Azure

GCP

Python

Go

Threat modeling

Docker

Kubernetes

Security monitoring

Tools

Wiz

Orca Security

Lacework

Upwind

AWS IAM

EC2

VPC

ECR

ECS

EKS

Docker

Kubernetes

Job description

Compass Security team seeks a seasoned security engineer to blend strategic partnership with hands-on engineering, infrastructure security, and automation. You will automate security requirements, build guardrails, and collaborate across engineering and security teams to deploy critical safeguards.

You will lead threat modeling, secure multi-cloud environments (AWS/Azure/GCP), and assess third-party integrations and AI tools to protect data integrity and compliance.