Senior Cloud Security Engineer - Secure Scalable Cloud Apps

Compass; Boston (MA); On-site; USD 175,000 - 196,000; Full time

Benefits offered by this job

Health/dental/vision benefits

401(k) plan

Commuter program

Paid time off

Job summary

Compass is seeking a Senior Security Engineer focused on Cloud Security to lead automation-driven security across our web and platform services. You will help engineers deploy safe-by-default tooling, design scalable security controls, and drive secure-by-default practices across cloud infrastructure.

You will collaborate with cross-functional teams to assess risks, perform threat modeling, and guide remediation while supporting integrations with AI tools and third-party services.

Qualifications

• 5+ years in a security role with 2+ years in cloud security.
• Hands-on automation and secure-by-default tooling experience.
• Strong knowledge of AWS IAM, EC2, VPC, ECR/ECS/EKS.
• Familiarity with Azure and/or GCP security concepts.
• Proficiency in Python or Go for automation.
• Experience with CNAPP or similar cloud security platforms.
• Knowledge of containerization (Docker) and orchestration (Kubernetes).

Responsibilities

• Empower engineers with safe-by-default tooling and automated security guardrails.
• Design and implement scalable controls for securing cloud infrastructure.
• Collaborate with engineering/security teams to deploy security enhancements across cloud.
• Build high-trust partnerships across the Engineering organization.
• Assist in security incident investigations and remediation guidance.
• Assess security for third-party integrations and emerging AI tools.

Skills

Automation

Cloud security

AWS

Azure

Threat modeling

Architecture review

Programming (Python/Go)

Docker

Kubernetes

Tools

Wiz

Orca Security

Lacework

Upwind

Docker

Kubernetes

Job description

Compass is seeking a Senior Security Engineer focused on Cloud Security to lead automation-driven security across our web and platform services. You will help engineers deploy safe-by-default tooling, design scalable security controls, and drive secure-by-default practices across cloud infrastructure.

You will collaborate with cross-functional teams to assess risks, perform threat modeling, and guide remediation while supporting integrations with AI tools and third-party services.