Staff Security Engineer - Product Security & Architecture

Compass Real Estate - Peninsula; New York (NY); On-site; USD 210,000 - 234,100; Full time

Benefits offered by this job

Incentive programs

Paid vacation

Holidays

Sick time

Medical benefits

401(k) plan

Job summary

Compass is redefining real estate technology with a security-first approach. The Staff Security Engineer will collaborate with product and engineering teams to embed secure-by-design practices across CI/CD pipelines and product features, ensuring robust protection for data and services.

You will lead automation, threat modeling, and advisory work, leveraging AI-enabled security tools while advancing the security culture within the organization and across multiple platforms.

Qualifications

• Bachelor's degree in Computer Science or related field.
• Minimum of three years in CI/CD and security tooling.
• Experience with SAST/DAST/SCA and secure coding reviews.
• Automation scripting with Python or Bash.
• Product development with Python/JavaScript/TypeScript/Golang/Java.
• IaC tooling (Terraform) to provision secure infra.
• Hands-on AWS experience aligning delivery and security.

Responsibilities

• Automate and scale application security testing within CI/CD pipelines.
• Drive secure-by-design architectures with engineering teams.
• Serve as trusted security advisor for product features and processes.
• Advocate for secure-by-design practices across the org.
• Build collaboration across Product and Engineering to meet delivery goals securely.
• Lead AI-powered security capabilities and AI-SPM frameworks.
• Stay ahead of trends, adopting new security technologies.

Skills

CI/CD tooling

SAST/DAST/SCA

Scripting: Python

Security code reviews

Multi-language dev

Terraform IaC

AWS

AI in security

Education

Bachelor's in CS or related field

Tools

Terraform

AWS

Job description

Compass is redefining real estate technology with a security-first approach. The Staff Security Engineer will collaborate with product and engineering teams to embed secure-by-design practices across CI/CD pipelines and product features, ensuring robust protection for data and services.

You will lead automation, threat modeling, and advisory work, leveraging AI-enabled security tools while advancing the security culture within the organization and across multiple platforms.