Senior Cloud Security Engineer — Automate Secure by Default

Compass; Town of Florida (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity/Commissions

Paid time off

401(k)

Health benefits

FSAs

Commuter program

Pet insurance

Job summary

Compass is seeking a Senior Security Engineer, Cloud Security, to empower engineers with safe-by-default tooling and robust guardrails while securing our cloud platforms and applications. You will collaborate across engineering to deploy security enhancements and guide best practices.

The role requires hands-on automation, cloud platform expertise, and experience with CNAPP tools, Docker, and Kubernetes to drive secure-by-default environments.

Qualifications

• Experience designing and implementing security controls at scale.
• Ability to automate security requirements and guardrails.
• Proven ability to work with cloud platforms (AWS, Azure, GCP).
• Experience with threat modeling and architectural review processes.
• Proficiency in at least one programming language for automation (Python/Go).
• Familiarity with containerization (Docker) and orchestration (Kubernetes).

Responsibilities

• Automate security requirements and build safe-by-default tooling.
• Design scalable controls to secure our cloud infrastructure.
• Collaborate with engineering and security teams to deploy security enhancements.
• Build enduring partnerships across the Engineering organization.
• Investigate and respond to security events and guide improvements.
• Assess security for third-party integrations and emerging AI tools.

Skills

Automation

Cloud security

AWS

Azure

GCP

Threat modeling

Python

Go

Security monitoring

Least privilege

Tools

Docker

Kubernetes

CNAPP tools (Wiz/Orca/Lacework/Upwind)

Job description

Compass is seeking a Senior Security Engineer, Cloud Security, to empower engineers with safe-by-default tooling and robust guardrails while securing our cloud platforms and applications. You will collaborate across engineering to deploy security enhancements and guide best practices.

The role requires hands-on automation, cloud platform expertise, and experience with CNAPP tools, Docker, and Kubernetes to drive secure-by-default environments.