Senior Security Engineer - Enterprise

Compass; New York (NY); Remote; USD 175,000 - 196,000; Full time

Benefits offered by this job

Incentive programs

Paid vacation

Medical benefits

401(k) plan

FSAs

Commuter program

Life and disability insurance

Parental leave

Pet insurance

Job summary

Compass is seeking a Security Engineer to advance Safe-by-Default environments, secure endpoint management, and IaC-driven security operations across macOS, Linux, and cloud identities. You will shape AI guardrails, MCP security, and 3rd-party risk while collaborating with Detection & Response teams in a fast-evolving, remote-first culture.

You will contribute to threat modeling, automation, and leadership in security outcomes, helping Compass scale securely as it grows its real estate platform

Qualifications

• Experience in endpoint management, identity, AI security, or Infrastructure-as-Code.
• Familiarity with Terraform and GitOps practices.
• Experience securing macOS environments at scale.
• Experience configuring cloud identity providers and SSO (Okta, Google Workspace).

Responsibilities

• Ensure Safe-by-Default Environments across enterprise technologies.
• Modernize Endpoint Management across devices (macOS, iOS, Windows, Linux).
• Drive GitOps & IaC workflows with Terraform and CI pipelines.
• Automate lifecycle security for deployment, patching, and software distribution.
• Govern AI & MCP security, enforce secure MCP usage and evaluations.
• Assess third-party and AI risk across integrations.
• Partner with Detection & Response to implement security incident workflows.
• Iterate security controls and tooling to support growing agent population.

Skills

Automation

Terraform

GitOps

Endpoint management

Okta

Threat modeling

Security leadership

SaaS security

Tools

Jamf Pro

FleetDM

MDM

EDR

Okta

Google Workspace

LDAP

SAML

OAuth

OIDC

Job description

At Compass, our mission is to help everyone find their place in the world. Founded in 2012, we’re revolutionizing the real estate industry with our end-to-end platform that empowers residential real estate agents to deliver exceptional service to seller and buyer clients.

Engineering @ Compass

Compass is building the first modern end-to-end real estate platform by integrating agents, buyers and sellers through technology. Until Compass, no one has achieved the blend of the Natural Intelligence that hundreds of thousands of enterprising real estate agents bring to this market, with the “Artificial Intelligence” that cloud, mobile and AI technologies enable. We are building AI to empower AI - Artificial Intelligence to empower Agent Intelligence.

Security @ Compass

We recognize that the most innovative teams are built from diverse backgrounds and unique skill sets, which is why we don't expect any single candidate to check every box. You do not need to meet 100% of these qualifications to apply. We are primarily looking for deep, practical experience in at least one of our core domains—such as endpoint management, identity, AI security, or Infrastructure-as-Code—along with a strong desire to learn the rest. If you are passionate about solving complex security challenges and eager to grow alongside Compass, we highly encourage you to submit your application.

What you can do:

• Ensure Safe-by-Default Environments: Empower team members by securing all enterprise technologies, including SaaS applications, corporate endpoints, office networks, and Business/Data Intelligence tools.
• Modernize Endpoint Management: Work across endpoint management, identity, and security operations to improve how Compass manages macOS, iOS, Windows, and Linux devices. In your first year, you will strengthen endpoint security architecture, expand automation, and improve the reliability and auditability of control deployments.
• Drive GitOps & IaC Workflows: Manage endpoint and SaaS security configurations through Terraform, version control, merge requests, continuous integration (CI) pipelines, and automated rollouts.
• Automate Lifecycle Security: Design and support automation for secure endpoint deployment, configuration, patching, and software distribution that aligns with strict security and operational compliance.
• Govern AI & MCP Security: Manage AI guardrails for business applications and Model Context Protocol (MCP) server management. Enforce secure MCP usage, conduct prompt security evaluations, review vibe-coded apps, and manage approved AI agents and endpoint tools to reduce the risk surface.
• Assess Third-Party & AI Risk: Evaluate the security properties and AI-feature risks of 3rd-party systems integrating into our enterprise environment. Provide comprehensive architecture, design, and process automation reviews.
• Partner on Detection & Response: Collaborate with the Detection and Response team to select corporate focus areas, develop incident workflows, and implement new solutions to thwart business email compromise (BEC).
• Iterate and Improve: Conduct regular security assessments on controls and applications, and provide the foundational security principles and tooling necessary to support our rapidly growing agent population and expansion into new markets.

Who you are:

• Empathetic & Accountable: You bring a practical, security-focused approach to problem solving, building customer trust while helping to improve the overall security program.
• Clear Communicator: Able to articulate security vulnerabilities, remediation techniques, and technical protocol functions (SAML, SCIM, OAuth, OIDC, SMTP, DNS) in an accessible way across a distributed, all-remote workforce.
• Automation-First Engineer: You have strong proficiency in scripting or programming (Python or Go) and leverage automation to solve the challenges of scale.
• Infrastructure-as-Code Expert: Strong hands-on ability with Terraform and GitOps practices, including module design, state management, code reviews, and pipeline-based deployments.
• Endpoint & Systems Specialist: Deep knowledge of endpoint management platforms (such as Jamf Pro, FleetDM, MDM, or EDR), particularly in architecting and securing macOS environments at scale.
• SaaS & Identity Practitioner: Experienced in configuring security controls for cloud identity providers (Okta, Google Workspace, LDAP), SSOs, Data Loss Prevention, and Firewalls. You have specific experience managing Okta tool usage and MCPs.
• Threat Modeler: You enjoy collaborating on threat modeling exercises and are driven to solve new challenges as Compass’s architecture rapidly evolves.
• Security Leader: Comfortable teaching and guiding development teams toward better security outcomes. You are open to bringing transferable experience from adjacent security, systems, or platform engineering backgrounds.

Check out our Engineering blog!

At Compass, our mission is to help everyone find their place in the world. This means we continually celebrate the diverse community different individuals cultivate. As an equal opportunity employer, we stay true to our mission by ensuring that our place can be anyone’s place.

Compensation

The base pay range for this position is $175,000 - $196,000; however, base pay offered may vary depending on job-related knowledge, skills, and experience. Bonuses and restricted stock units may be provided as part of the compensation package, in addition to a full range of benefits. Base pay is based on market location. Minimum wage for the position will always be met.

Perks that You Need to Know About:

• Participation in our incentive programs (which may include eligible cash, equity, or commissions).
• Plus paid vacation, holidays, sick time, parental leave, and recharge leave;
• medical, tele-health, dental and vision benefits;
• 401(k) plan;
• flexible spending accounts (FSAs);
• commuter program;
• life and disability insurance;
• Maven (a support system for new parents);
• Carrot (fertility benefits);
• UrbanSitter (caregiver referral network);
• Employee Assistance Program;
• and pet insurance.

Do your best work, be your authentic self.

At Compass, we believe that everyone deserves to find their place in the world — a place where they feel like they belong, where they can be their authentic selves, where they can thrive. Our collaborative, energetic culture is grounded in our Compass Entrepreneurship Principles and our commitment to diversity, equity, inclusion, growth and mobility. As an equal opportunity employer, we offer competitive compensation packages, robust benefits and professional growth opportunities aimed at helping to improve our employees' lives and careers.

Notice for California Applicants

Los Angeles County Fair Chance Notice