Staff Security Engineer, Product Security and Architecture

About the role

At Compass, our mission is to help everyone find their place in the world. Founded in 2012, we’re revolutionizing the real estate industry with our end-to-end platform that empowers residential real estate agents to deliver exceptional service to seller and buyer clients. About Compass International Holdings (CIH): Compass International Holdings (CIH) is the largest residential real estate platform in the world, established by the January 2026 merger of Compass and Anywhere Real Estate. By bringing together the technology, brands, and agent networks that power residential real estate transactions across the United States and globally, CIH's mission is to help everyone find their place in the world — and to build the single software platform for all real estate activity, at a scale and complexity few technology companies ever operate at. Security at Compass International Holdings: The Security organization protects one of the largest and most complex real estate technology estates in the industry. We are hands‑on engineers who build security as a service: secure‑by‑design tooling, automated guardrails, and trusted partnership with Engineering, rather than gatekeeping. As a Staff Security Engineer, you are empowered to directly drive technical security results and shape the roadmaps that our engineering teams adopt and build against.

Responsibilities

• Automate & Scale Application Security: Build, enhance, and support automated application security testing frameworks and tooling to seamlessly integrate security into continuous integration and delivery (CI/CD) pipelines.
• Drive Secure‑by‑Design Architectures: Partner closely with engineering teams to evaluate solution architectures and codebases, providing technical feedback that embeds secure‑by‑design principles from the start.
• Serve as a Trusted Security Advisor: Act as a key resource and subject matter expert for product and engineering teams, offering security guidance and risk evaluations for new product features, development processes, tooling, and services.
• Evangelize Product Security: Advocate for secure‑by‑design approaches across the organizations helping to mature the overall security culture.
• Cultivate Collaboration: Build strong, collaborative relationships across the Product and Engineering organization to help product teams efficiently achieve their delivery goals without compromising on security.
• Secure & Accelerate with AI: Drive the adoption of AI‑powered security capabilities (e.g., code/IaC scanning copilots and automated triage) to foster operational efficiencies, while establishing an AI Security Posture Management (AI‑SPM) framework and secure‑by‑design standards needed to safely integrate AI into CIH products and protect enterprise data assets from emerging threats (such as prompt injection, model/data exfiltration, and unsanctioned