Senior Security Engineer - Cloud

Compass; New York (NY); On-site; USD 175,000 - 196,000; Full time

Benefits offered by this job

Incentive programs

Paid time off and holidays

Medical, dental, and vision benefits

401(k) plan

FSAs

Commute program

Life and disability insurance

Maven program (new parent support)

Fertility benefits (Carrot)

Caregiver network (UrbanSitter)

Employee Assistance Program

Pet insurance

Job summary

Compass is hiring a Senior Security Engineer, Cloud Security, to lead security across our cloud platforms and applications. You will design scalable controls, automate guardrails, and partner with engineering teams to implement secure-by-default practices.

You will evaluate CNAPP tools, secure AWS/Azure environments, and guide incident response while communicating risk to multiple stakeholders. This role blends hands-on engineering with strategic security program leadership.

Qualifications

• 5+ years in a security role, with at least 2+ years cloud security.
• Deep knowledge of AWS IAM, EC2, VPC, ECR, ECS, EKS; Azure and/or GCP basics.
• Experience with CNAPP/cloud security tools (Wiz, Orca, Lacework, Upwind).
• Programming in Python or Go for automation.
• Security principles: least privilege, defense-in-depth, monitoring.
• Experience with Docker and Kubernetes orchestration.
• Ability to communicate security risks to diverse audiences.

Responsibilities

• Empower engineers with safe-by-default tooling and automated guardrails.
• Design and implement scalable security controls for cloud infrastructure.
• Collaborate with engineering and security teams to deploy security enhancements across cloud infra.
• Build enduring, high-trust partnerships across the Engineering organization.
• Investigate security events and guide teams to improve security practices.
• Assess third-party integrations and emerging AI tools for security impact.

Skills

Automation

Cloud security (AWS & Azure)

Threat modeling

Python/Go for automation

Kubernetes

Docker

CNAPP tools (Wiz, Orca, Lacework, Upiw

Cross-functional collaboration

Tools

Python

Go

Wiz

Orca Security

Lacework

Upwind

AWS

Azure

Docker

Kubernetes

Job description

At Compass, our mission is to help everyone find their place in the world. Founded in 2012, we’re revolutionizing the real estate industry with our end-to-end platform that empowers residential real estate agents to deliver exceptional service to seller and buyer clients.

Senior Security Engineer, Cloud Security

Security @ Compass

We are hands-on security engineers helping to build secure, resilient, and scalable web apps, mobile apps, and platform for the real estate industry. We work with a diverse set of teams to provide and support transparent and automated security tooling and services. We architect secure web products, perform simulated attacks, identify weaknesses, and work with teams to remediate and protect our products. You will lead our effort to build security as a service to drive safe-by-default environments and drive customer trust.

What you will do:

This role blends strategic partnership, hands-on engineering, infrastructure security, and automation.

• Empower engineers with safe-by-default tooling, ensuring engineering velocity by automating security requirements and building robust guardrails.
• Design and implement scalable systems and controls to secure our cloud infrastructure effectively.
• Collaborate closely with engineering and security teams to drive the deployment of critical security enhancements and control changes across our cloud infrastructure.
• Build enduring, high-trust partnerships with colleagues across the Engineering organization.
• Assist in investigating and responding to security events, then work with teams to guide and improve their security practices.
• Conduct security assessments for third-party integrations and emerging AI tools, ensuring that business productivity does not compromise data integrity or compliance.

Who you are:

• Automation is your default approach to security. You understand the unique challenges of securing systems at scale and consistently leverage automation to solve them.
• You possess a proactive mindset, adept at identifying and resolving security gaps or inefficiencies through innovative automation and tooling.
• Expertise in securing cloud platforms, particularly AWS and Azure.
• Strong analytical and problem-solving skills, with the ability to critically and objectively assess complex security risks.
• Excited to collaborate with cross-functional teams to build secure, reliable, and scalable systems.
• You can clearly communicate complex security vulnerabilities and remediation techniques to diverse audiences.
• You are comfortable guiding and educating development teams to achieve stronger security outcomes.
• Experience with threat modeling and architectural review processes; you have a track record of identifying potential attack vectors early in the development lifecycle.

Minimum Qualifications:

• Experience: At least 5+ years of experience in a security-related role, with at least 2+ years specifically focused on cloud security.
• Technical Skills:
• Strong understanding of cloud platforms and security features, particularly AWS (IAM, EC2, VPC, container services like ECR, ECS, and EKS), with foundational knowledge of Azure and/or GCP
• Strong understanding of Azure services and how to secure them.
• Proven experience with a CNAPP or similar cloud security tool (e.g., Wiz, Orca Security, Lacework, Upwind).
• Proficiency in at least one programming language (e.g., Python, Go) for automation.
• Knowledge of core security principles such as the principle of least privilege, defense-in-depth, and security monitoring.
• Familiarity with containerization technologies (Docker) and orchestration platforms (Kubernetes).

Nice to have:

• Experience with GCP, OCI and multi-cloud networks and infrastructure, especially when designing cloud-agnostic systems.

Compensation

The base pay range for this position is $175,000 - $196,000; however, base pay offered may vary depending on job-related knowledge, skills, and experience. Bonuses and restricted stock units may be provided as part of the compensation package, in addition to a full range of benefits. Base pay is based on market location. Minimum wage for the position will always be met.

Perks that You Need to Know About:

• Participation in our incentive programs (which may include eligible cash, equity, or commissions).
• Plus paid vacation, holidays, sick time, parental leave, and recharge leave;
• medical, tele-health, dental and vision benefits;
• 401(k) plan;
• flexible spending accounts (FSAs);
• commuter program;
• life and disability insurance;
• Maven (a support system for new parents);
• Carrot (fertility benefits);
• UrbanSitter (caregiver referral network);
• Employee Assistance Program;
• pet insurance.

Do your best work, be your authentic self.

At Compass, we believe that everyone deserves to find their place in the world — a place where they feel like they belong, where they can be their authentic selves, where they can thrive. Our collaborative, energetic culture is grounded in our Compass Entrepreneurship Principles and our commitment to diversity, equity, inclusion, growth and mobility. As an equal opportunity employer, we offer competitive compensation packages, robust benefits and professional growth opportunities aimed at helping to improve our employees' lives and careers.

Notice for California Applicants

Los Angeles County Fair Chance Notice