Senior Security Engineer II
At Compass, our mission is to help everyone find their place in the world. Founded in 2012, we’re revolutionizing the real estate industry with an end‑to‑end platform that empowers residential real estate agents to deliver exceptional service to seller and buyer clients.
About the role
Senior Security Engineer, Cloud Security – we are hands‑on security engineers building secure, resilient, and scalable web and mobile applications and platform services for the real‑estate industry. The role blends strategic partnership, hands‑on engineering, infrastructure security, and automation to drive safe‑by‑default environments and customer trust.
Responsibilities
- Empower engineers with safe‑by‑default tooling, automating security requirements and building robust guardrails to maintain engineering velocity.
- Design and implement scalable systems and controls to secure our cloud infrastructure effectively.
- Collaborate closely with engineering and security teams to deploy critical security enhancements and control changes across the cloud environment.
- Build enduring, high‑trust partnerships with colleagues across the Engineering organization.
- Assist in investigating and responding to security events, then guide teams to improve their security practices.
- Conduct security assessments for third‑party integrations and emerging AI tools, ensuring business productivity does not compromise data integrity or compliance.
Requirements
- Automation is your default approach to security, with a proactive mindset for identifying and resolving security gaps through tooling.
- Expertise securing cloud platforms, particularly AWS and Azure; foundational knowledge of Azure services and GCP is a plus.
- Strong analytical and problem‑solving skills; ability to objectively assess complex security risks.
- Excellent communication skills for explaining vulnerabilities and remediation techniques to diverse audiences.
- Experience guiding and educating development teams to achieve stronger security outcomes.
- Experience with threat modeling and architectural review processes, identifying attack vectors early in the development lifecycle.
- At least 5 + years of experience in a security‑related role, with 2 + years focused on cloud security.
- Technical skills:
- Deep knowledge of AWS services (IAM, EC2, VPC, ECR, ECS, EKS) and security features.
- Strong understanding of Azure services and their security.
- Experience with a CNAPP or similar cloud security tool (e.g., Wiz, Orca Security, Lacework, Upwind).
- Proficiency in at least one programming language for automation (e.g., Python, Go).
- Knowledge of core security principles such as least privilege, defense‑in‑depth, and security monitoring.
- Familiarity with containerization (Docker) and orchestration platforms (Kubernetes).
- Nice to have: experience with GCP, OCI, and multi‑cloud networks/infrastructure, especially when designing cloud‑agnostic systems.
Compensation
The base pay range for this position is $176,000 – $196,000; actual base pay may vary based on knowledge, skills, and experience. Bonuses and restricted stock units may be provided as part of the compensation package, in addition to a full range of benefits. Base pay is based on market location, and the minimum wage for the position will always be met.
Benefits
- Participation in incentive programs (cash, equity, or commissions)
- Paid vacation, holidays, sick time, parental leave, and recharge leave
- Medical, tele‑health, dental, and vision benefits
- 401(k) plan
- Flexible spending accounts (FSAs)
- Commuter program
- Life and disability insurance
- Maven (support system for new parents)
- Carrot (fertility benefits)
- UrbanSitter (caregiver referral network)
- Employee Assistance Program
- Pet insurance