Product Security Engineer

About Compa

Compa is a venture‑backed AI startup revolutionizing the future of compensation. In a dynamic job market with hiring challenges, accountability, and the rise of AI, companies need the best data to stay ahead of industry changes, competition, and costs. Compa has developed the premier real‑time compensation data platform, delivering top‑tier compensation intelligence to leading enterprise teams. Compa is a compensation intelligence company built to augment enterprise compensation teams in the era of AI.

Our customers include the world’s biggest companies: NVIDIA, Stripe, Door Dash, Open AI, TMobile, Moderna, Workday, Ulta, Target, and more.

Locations

Compa headquarters are located in Irvine, California, with growing sites in Denver, Colorado and San Francisco, California. We’re a collaborative, curious, and driven team that values transparency, ownership, and continuous learning and prioritizes in‑person work where possible.

We are looking for a Product Security Engineer to build and scale the Product Security function s is the first dedicated security hire at the product layer – a senior individual contributor role reporting directly to the Head of Security. You’ll set the security bar, establish standards and patterns, provide architectural guidance, and build leverage through tooling and automation. You are an advisor, architect, and builder:
Security sets the direction;
Engineering builds ’ll define secure engineering practices, operationalize them through repeatable processes, automation, and developer tooling, and continuously improve them as we grow. When a strategic security initiative spans application code, cloud infrastructure, identity, and platform, you will lead it from design through initial implementation, then partner with Engineering to scale and maintain. You will be the security voice in the room when consequential decisions are made, proactively shaping how Engineering and Product think about security, risk, architecture, and secure software development.

• Perform architecture reviews, threat modeling, and security design reviews across applications, APIs, cloud infrastructure, data pipelines, and AI‑enabled systems.
• Develop security standards, reference architectures, and secure design patterns that enable teams to build securely by default.
• Define and continuously improve the Secure Software Development Lifecycle (SDLC), embedding security throughout engineering workflows and release processes.
• Lead security assessments for new products, major features, third‑party integrations, and emerging technologies.
• Serve as a trusted technical advisor on security architecture, implementation decisions, and risk tradeoffs.
• Communicate security concepts clearly across audiences – from engineering design reviews to product documentation, trust portal content, and customer diligence conversations.

• Design and build reusable security patterns, libraries, and developer tooling that scale secure‑by‑default practices across engineering.
• Implement security automation and guardrails that improve security posture while reducing developer friction.
• Partner with Platform Engineering on cloud security posture, infrastructure hardening, secrets management, workload identity, and security observability.

• Define and operationalize secure patterns for AI‑enabled products, agents, MCP servers, tool integrations, and retrieval systems.
• Evaluate emerging AI security risks and translate them into practical architectural guidance, engineering controls, and platform capabilities.
• Partner with developers to improve the safe and scalable use of AI throughout the software development lifecycle, including AI‑assisted tools and emerging workflows.

• Prototype and deliver initial production‑ready implementations for strategic initiatives, establishing patterns for broader adoption.
• Contribute to security incident response, investigations, and remediation when needed.

• 5+ years of Software Engineering experience to include building and shipping production software.
• Strong…