Senior Security Engineer - Cloud

Compass•Seattle, WA

5d•$153,000 - $171,000

About The Position

Compass is hiring a Senior Security Engineer for its Security team, which builds secure, resilient, and scalable web applications, mobile applications, and platform services for the real estate industry. The role combines strategic partnership, hands-on engineering, infrastructure security, and automation. You will help build security as a service by enabling safe-by-default environments and strengthening customer trust. The engineer will automate security requirements and build guardrails that support engineering velocity, design and implement scalable cloud security systems and controls, and partner with Engineering and Security teams to deploy security enhancements across cloud infrastructure. The role also involves investigating and responding to security events, helping teams improve security practices, conducting assessments of third-party integrations and emerging AI tools, and communicating security risks and remediation guidance.

Requirements

At least 5 years of experience in a security-related role, including at least 2 years focused specifically on cloud security.
Strong understanding of cloud platforms and security features, particularly AWS services including IAM, EC2, VPC, ECR, ECS, and EKS.
Strong understanding of Azure services and how to secure them.
Foundational knowledge of Azure and/or GCP.
Proven experience with a CNAPP or similar cloud security tool, such as Wiz, Orca Security, Lacework, or Upwind.
Proficiency in at least one programming language, such as Python or Go, for automation.
Knowledge of core security principles, including least privilege, defense-in-depth, and security monitoring.
Familiarity with Docker and Kubernetes.
Strong analytical and problem-solving skills, including the ability to assess complex security risks.
Ability to collaborate across teams and clearly communicate security risks and remediation techniques.

Nice To Haves

Experience with GCP, OCI, and multi-cloud networks and infrastructure, particularly when designing cloud-agnostic systems.

Responsibilities

Build safe-by-default tooling and automate security requirements to support engineering velocity.
Design and implement scalable systems and controls to secure cloud infrastructure.
Collaborate with engineering and security teams to deploy security enhancements and control changes across cloud infrastructure.
Build trusted partnerships with colleagues across the Engineering organization.
Assist with investigating and responding to security events, and guide teams in improving their security practices.
Assess third-party integrations and emerging AI tools to protect data integrity and compliance.
Use threat modeling and architectural reviews to identify potential attack vectors early in the development lifecycle.
Communicate security vulnerabilities and remediation techniques to diverse audiences, and guide and educate development teams.

Benefits

Incentive programs, which may include eligible cash, equity, or commissions.
Paid vacation, holidays, sick time, parental leave, and recharge leave.
Medical, tele-health, dental, and vision benefits.
401(k) plan.
Flexible spending accounts (FSAs).
Commuter program.
Life and disability insurance.
Maven support system for new parents.
Carrot fertility benefits.
UrbanSitter caregiver referral network.
Employee Assistance Program.
Pet insurance.
Bonuses and restricted stock units may be provided as part of the compensation package.