Senior Security Engineer - Cloud

Compass•New York, NY

5d•$153,000 - $171,000

About The Position

Compass is hiring a Senior Security Engineer for its Security team. The team builds secure, resilient, and scalable web applications, mobile applications, and platform services for the real estate industry. It partners with a range of teams to provide transparent, automated security tooling and services, architect secure products, simulate attacks, identify weaknesses, and help teams remediate risks. This role will lead efforts to build security as a service, establish safe-by-default environments, and strengthen customer trust. The position combines strategic partnership, hands-on engineering, infrastructure security, and automation. The engineer will design and implement scalable controls for cloud infrastructure, help engineers meet security requirements through automated tooling and guardrails, and collaborate with engineering and security teams on critical security improvements. The role also includes responding to security events, improving teams’ security practices, and assessing third-party integrations and emerging AI tools for data integrity and compliance risks.

Requirements

At least 5 years of experience in a security-related role, including at least 2 years focused specifically on cloud security.
Strong understanding of cloud platforms and security features, particularly AWS services including IAM, EC2, VPC, ECR, ECS, and EKS.
Strong understanding of Azure services and how to secure them.
Foundational knowledge of Azure and/or GCP.
Proven experience with a CNAPP or similar cloud security tool, such as Wiz, Orca Security, Lacework, or Upwind.
Proficiency in at least one programming language, such as Python or Go, for automation.
Knowledge of core security principles, including least privilege, defense-in-depth, and security monitoring.
Familiarity with Docker and container orchestration platforms such as Kubernetes.
Experience with threat modeling and architectural review processes.
Strong analytical and problem-solving skills, including the ability to assess complex security risks.
Ability to collaborate across teams and communicate complex security issues and remediation techniques to diverse audiences.
Comfort guiding and educating development teams on security.

Nice To Haves

Experience with GCP, OCI, and multi-cloud networks and infrastructure, especially when designing cloud-agnostic systems.

Responsibilities

Build safe-by-default tooling and automate security requirements and guardrails to support engineering velocity.
Design and implement scalable systems and controls to secure cloud infrastructure.
Partner with engineering and security teams to deploy security enhancements and control changes across cloud infrastructure.
Build collaborative, high-trust partnerships across the Engineering organization.
Assist with investigating and responding to security events, and guide teams in improving security practices.
Conduct security assessments of third-party integrations and emerging AI tools to protect data integrity and compliance.
Use automation and tooling to identify and resolve security gaps and inefficiencies.
Communicate security vulnerabilities and remediation techniques, and guide and educate development teams.
Apply threat modeling and architectural reviews to identify potential attack vectors early in the development lifecycle.