Staff Security Engineer: Secure-by-Design & AI Security

Compass; Town of Florida (NY); On-site; USD 210,000 - 234,100; Full time

Benefits offered by this job

Incentives

Paid vacation

Medical benefits

401(k) plan

FSAs

Commuter program

Life & disability

Maven

Carrot fertility

UrbanSitter

EAP

Pet insurance

Job summary

Compass is seeking a Staff Security Engineer to drive secure-by-design security across our real estate technology platform. You will partner with product and engineering teams to embed security in architectures, code reviews, and CI/CD pipelines, while guiding AI-powered security initiatives.

You will mentor teams, influence threat modeling, and help shape the security culture as we scale our industry-leading platform and cloud environments.

Qualifications

• 3+ years in implementing and tuning automated pipeline tools (CI/CD).
• 3+ years in configuring SAST/DAST/SCA security tools.
• Automation scripting with Python or Bash.
• Product development using Python/JavaScript/TypeScript/Golang/Java.
• Performing security code reviews for Python/JavaScript/TypeScript/Golang/Java.
• IaC tooling experience with Terraform.
• Hands-on AWS experience with secure product delivery.
• Experience using AI to aid security processes.

Responsibilities

• Automate & Scale Application Security: Build, enhance, and support automated application security testing frameworks and tooling to seamlessly integrate security into CI/CD pipelines.
• Drive Secure-by-Design Architectures: Partner closely with engineering teams to evaluate solution architectures and codebases, providing technical feedback that embeds secure-by-design principles from the start.
• Serve as a Trusted Security Advisor: Act as a key resource and subject matter expert for product and engineering teams, offering security guidance and risk evaluations for new product features, development processes, tooling, and services.
• Evangelize Product Security: Advocate for secure-by-design approaches across the organizations helping to mature the overall security culture.
• Cultivate Collaboration: Build strong, collaborative relationships across the Product and Engineering organization to help product teams efficiently achieve their delivery goals without compromising on security.
• Secure & Accelerate with AI: Drive the adoption of AI-powered security capabilities (e.g., code/IaC scanning copilots and automated triage) to foster operational efficiencies, while establishing a AI Security Posture Management (AI-SPM) frameworks and secure-by-design standards needed to safely integrate AI into CIH products and protect enterprise data assets from emerging threats (such as prompt injection, model/data exfiltration, and unsanctioned "shadow AI" usage).
• Continuous Innovation: Stay ahead of industry trends, embracing and adopting new technologies to ensure security capabilities keep pace with evolving business and engineering objectives.

Skills

CI/CD security

SAST/DAST/SCA

Python scripting

JavaScript/TypeScript

Golang/Java

IaC (Terraform)

AWS

AI in security

Security code reviews

CI/CD tooling

Education

Bachelor’s degree in Computer Science or related field

Job description

Compass is seeking a Staff Security Engineer to drive secure-by-design security across our real estate technology platform. You will partner with product and engineering teams to embed security in architectures, code reviews, and CI/CD pipelines, while guiding AI-powered security initiatives.

You will mentor teams, influence threat modeling, and help shape the security culture as we scale our industry-leading platform and cloud environments.