Staff Security Engineer — Secure-by-Design & AI

Compass; Boston (MA); On-site; USD 210,000 - 234,100; Full time

Benefits offered by this job

Incentive programs

Vacation and leave

Medical, dental, vision benefits

401(k)

FSAs

Commuter program

Life and disability insurance

Maven

Carrot

UrbanSitter

Employee Assistance Program

Pet insurance

Job summary

Compass is seeking a Staff Security Engineer to automate security in CI/CD, design secure-by-design architectures, and advise product teams across the organization. You will partner with engineering to shape roadmaps and drive AI-powered security capabilities to protect enterprise data assets.

Ideal candidates have 3+ years in security tooling, IaC with Terraform, AWS, and strong coding skills in Python/JS/TS/Go/Java; bachelor’s degree and relevant certifications are a plus.

Qualifications

• Bachelor’s degree in Computer Science or equivalent practical experience.
• 3+ years administering CI/CD and security tooling.
• 3+ years in security code reviews for Python/JS/TS/Golang/Java.
• Hands-on IaC with Terraform and AWS.
• Experience applying AI to security processes.

Responsibilities

• Automate and scale application security within CI/CD pipelines.
• Partner with engineering to implement secure-by-design architectures.
• Advise product teams on security risks for new features and processes.
• Advocate for secure-by-design practices across the organization.
• Collaborate with Product and Engineering to meet delivery goals without compromising security.
• Drive AI-powered security capabilities and AI-SPM frameworks.
• Stay ahead of industry trends and adopt new security technologies.

Skills

CI/CD tools

App security tooling

Python scripting

Security code reviews

IaC (Terraform)

AWS experience

AI for security

Education

Bachelor’s degree in Computer Science

Tools

Terraform

SAST/DAST/SCA tooling

Job description

Compass is seeking a Staff Security Engineer to automate security in CI/CD, design secure-by-design architectures, and advise product teams across the organization. You will partner with engineering to shape roadmaps and drive AI-powered security capabilities to protect enterprise data assets.

Ideal candidates have 3+ years in security tooling, IaC with Terraform, AWS, and strong coding skills in Python/JS/TS/Go/Java; bachelor’s degree and relevant certifications are a plus.