Staff AI Security Engineer: Secure, Governed AI

Compa; Denver (CO); On-site; USD 203,000 - 275,000; Full time

Benefits offered by this job

Medical, dental, vision

PTO and parental leave

Equity

Flexible work environment

Job summary

Compa, an AI-first startup, is seeking a Staff Security Engineer to lead secure AI adoption at enterprise scale. You will design and build the identity, data, endpoint, and network foundations that enable safe AI use across teams and tools.

You will enforce security and privacy by default, addressing threats like prompt injection, data leakage, and excessive automation, while maintaining usability and governance.

Qualifications

• Significant hands-on security engineering experience with a security-first mindset.
• Experience designing, building, or securing AI systems or integrations (agents, tool use, retrieval over internal data).
• Deep experience with identity and access architecture: SSO, federation, MFA, privileged access, OAuth scopes.

Responsibilities

• Build the secure foundation for AI at Compa, covering identity, data, endpoint, SaaS, and network.
• Enable rapid secure adoption of approved AI tools across teams.
• Own end-to-end requests, turning requirements into production solutions with cross-functional partners.
• Secure non-human identities and agent access with scoped credentials and governance.
• Control data paths with classification, permission-aware retrieval, DLP, and tool allowlisting.
• Evaluate attack paths for models and integrations and enforce risk-based decisions.
• Build for detection and response with audit logs and automated enforcement.
• Raise Compa's security posture across identity, endpoint, cloud, and network.

Skills

Security engineering

Identity and access architecture

Cloud security fundamentals

Threat modeling

End-user and non-human access control

Audit logging

Data governance

OAuth and scopes

Job description

Compa, an AI-first startup, is seeking a Staff Security Engineer to lead secure AI adoption at enterprise scale. You will design and build the identity, data, endpoint, and network foundations that enable safe AI use across teams and tools.

You will enforce security and privacy by default, addressing threats like prompt injection, data leakage, and excessive automation, while maintaining usability and governance.