Senior Security Engineer II

At Compass, our mission is to help everyone find their place in the world. Founded in 2012, we're revolutionizing the real estate industry with our end-to-end platform that empowers residential real estate agents to deliver exceptional service to seller and buyer clients.

Security @ Compass

• Empower engineers with safe-by-default tooling, ensuring engineering velocity by automating security requirements and building robust guardrails.
• Design and implement scalable systems and controls to secure our cloud infrastructure effectively.
• Collaborate closely with engineering and security teams to drive the deployment of critical security enhancements and control changes across our cloud infrastructure.
• Build enduring, high-trust partnerships with colleagues across the Engineering organization.
• Assist in investigating and responding to security events, then work with teams to guide and improve their security practices.
• Conduct security assessments for third-party integrations and emerging AI tools, ensuring that business productivity does not compromise data integrity or compliance.

• Automation is your default approach to security. You understand the unique challenges of securing systems at scale and consistently leverage automation to solve them.
• You possess a proactive mindset, adept at identifying and resolving security gaps or inefficiencies through innovative automation and tooling.
• Expertise in securing cloud platforms, particularly AWS and Azure.
• Strong analytical and problem‑solving skills, with the ability to critically and objectively assess complex security risks.
• Excited to collaborate with cross‑functional teams to build secure, reliable, and scalable systems.
• You can clearly communicate complex security vulnerabilities and remediation techniques to diverse audiences.
• You are comfortable guiding and educating development teams to achieve stronger security outcomes.
• Experience with threat modeling and architectural review processes; you have a track record of identifying potential attack vectors early in the development lifecycle.

• At least 5+ years of experience in a security‑related role, with at least 2+ years specifically focused on cloud security.

• Strong understanding of cloud platforms and security features, particularly AWS (IAM, EC2, VPC, container services like ECR, ECS, and EKS), with foundational knowledge of Azure and/or GCP.
• Strong understanding of Azure services and how to secure them.
• Proven experience with a CNAPP or similar cloud security tool (e.g., Wiz, Orca Security, Lacework, Upwind).
• Proficiency in at least one programming language (e.g., Python, Go) for automation.
• Knowledge of core security principles such as the principle of least privilege, defense‑in‑depth, and security monitoring.
• Familiarity with containerization technologies (Docker) and orchestration platforms (Kubernetes).

• Experience with GCP, OCI and multi‑cloud networks and infrastructure, especially when designing cloud‑agnostic systems.

The base pay range for this position is $176,000 - $196,000; however, base pay offered may vary depending on job‑related knowledge, skills, and experience. Bonuses and restricted stock units may be provided as part of the compensation package, in addition to a full range of benefits. Base pay is based on market location. Minimum wage for the position will always be met.

• Participation in incentive programs, which may include eligible cash, equity, or commissions.
• Paid vacation, holidays, sick time, parental leave, and recharge leave.
• Medical, tele‑health, dental, and vision benefits.
• 401(k) plan.
• Flexible spending accounts (FSAs).
• Commuter program.
• Life and disability insurance.
• Maven (a support system for new parents).
• Carrot (fertility benefits).
• Urban Sitter (caregiver referral network).
• Employee Assistance Program.
• Pet insurance.