Senior Security Engineer – Endpoint & IaC Automation

Compass; Boston (MA); Remote; USD 175,000 - 196,000; Full time

Benefits offered by this job

Incentive programs

Paid vacation & holidays

Medical benefits

401(k) plan

FSAs

Commuter program

Life and disability insurance

Parental support

Pet insurance

Job summary

Compass is building a modern end-to-end real estate platform and seeks a Security Engineer to help secure our enterprise environments and AI/endpoint stack. You will promote Safe-by-Default environments, modernize endpoint management, and drive GitOps and IaC workflows to secure Compass systems at scale.

We value automation-first engineers with Terraform expertise, strong scripting skills, and a passion for threat modeling and incident response.

Qualifications

• Experience in security for enterprise environments.
• Practical security experience in endpoint management or IAM, IaC, or AI security.
• Ability to automate security workflows with scripting/programming.
• Familiarity with Terraform and GitOps practices.
• Strong communicator with ability to guide development teams.

Responsibilities

• Secure enterprise environments with Safe-by-Default principles.
• Strengthen endpoint security architecture and automation across macOS, iOS, Windows, Linux.
• Manage security configurations via Terraform and CI pipelines.
• Design automation for deployment, patching, and software distribution.
• Manage AI guardrails and MCP server security practices.
• Evaluate third-party risk and perform threat modeling.
• Collaborate on detection and incident response workflows.
• Continuously assess controls and tooling to scale security.

Skills

Python or Go

Terraform

GitOps

Endpoint management

Security governance

Threat modeling

Cloud identity

Communication

Tools

Jamf Pro

FleetDM

MDM

EDR

Okta

Google Workspace

OAuth/OIDC

SAML/SCIM

Job description

Compass is building a modern end-to-end real estate platform and seeks a Security Engineer to help secure our enterprise environments and AI/endpoint stack. You will promote Safe-by-Default environments, modernize endpoint management, and drive GitOps and IaC workflows to secure Compass systems at scale.

We value automation-first engineers with Terraform expertise, strong scripting skills, and a passion for threat modeling and incident response.