Senior Manager, Security Engineering

Compass • Boston, MA

90d • $210,000 - $245,000

About The Position

Compass is seeking a Senior Manager, Platform Security to lead and mature our security programs across our AWS cloud infrastructure, application security (AppSec), and product security. This is a critical leadership role responsible for securing the end-to-end technology stack of our core real estate platform, utilized by over 45,000 agents and 1 million consumers. The ideal candidate will be a pragmatic leader who can balance the need for rapid business growth with a robust security posture in a challenging, resource-constrained environment.

Requirements

• Minimum of 10 years of experience in information security, with at least 3 years in a leadership role managing cloud and application security teams.
• Deep understanding of AWS security services and best practices.
• Experience with application security testing (SAST/DAST), secure development lifecycles, and DevOps security.
• Proven ability to lead and motivate a senior, high-performing team.
• Excellent communication and interpersonal skills, with the ability to influence and build consensus across technical and business functions.
• Strong business acumen and a pragmatic approach to security.
• Bachelor's degree in Computer Science, Information Security, or a related field.

Nice To Haves

• Familiarity with security tech stack (e.g., Wiz, Crowdstrike, Okta, AWS, Signal Sciences/Fastly WAF, API Security Gateways).
• Relevant certifications such as CISSP, CSSLP, or AWS Certified Security - Specialty.

Responsibilities

• Develop and implement a comprehensive security strategy for cloud, application, and product security that aligns with business objectives and key security frameworks like NIST CSF and CIS Controls.
• Lead and mentor a team of security engineers and architects, fostering a culture of ownership, continuous improvement, and collaboration with the broader Product & Engineering organization.
• Oversee the security of our AWS environment, focusing on implementing 'golden path' guardrails, improving visibility, and remediating identified risks.
• Drive the maturation of our application security program by integrating security into the CI/CD pipeline, conducting design reviews, and managing the security review backlog.
• Collaborate with the Offensive Security team to manage and prioritize the remediation of vulnerabilities across the platform and applications.
• Partner with key stakeholders, including the CTO, SVP of Product & Engineering, and other technical leaders, to ensure security initiatives are well-understood, prioritized, and delivered.
• Demonstrate expertise in applying Artificial Intelligence (AI) and Machine Learning (ML) to Cloud and Application Security.
• Define and track key performance indicators (KPIs) and risk indicators (KRIs) to measure the effectiveness of the security program and provide regular updates to senior leadership and the Audit Committee.

Benefits

• Participation in incentive programs (which may include eligible cash, equity, or commissions).
• Paid vacation, holidays, sick time, parental leave, and recharge leave.
• Medical, tele-health, dental and vision benefits.
• 401(k) plan.
• Flexible spending accounts (FSAs).
• Commuter program.
• Life and disability insurance.
• Maven (a support system for new parents).
• Carrot (fertility benefits).
• UrbanSitter (caregiver referral network).
• Employee Assistance Program.
• Pet insurance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 1,001-5,000 employees