5 hours ago
Base Salary
$210k - $234k/yr
Responsibilities
- Own the AI product security roadmap, standards, and strategy in partnership with AI platform and product engineering teams.
- Threat model AI features, RAG pipelines, multi-agent workflows, and automated decisioning before release.
- Architect and automate runtime protections for LLM inputs and outputs, including injection mitigation, jailbreak defense, output verification, and sensitive-data egress checks.
- Design security controls for autonomous agents, including scoped permissions, human-in-the-loop checkpoints, audit trails, and safe tool invocation.
- Secure retrieval systems through access controls, source integrity, tenancy boundaries, and retrieval-boundary protections.
- Assess the security, privacy, data-retention, and training-use posture of third-party models, inference providers, and vector stores.
- Build telemetry and detections for AI abuse, anomalous tool invocation, prompt abuse, unusual retrieval, and model-mediated data exfiltration.
- Ship reusable libraries, CI/CD checks, and evaluation harnesses that make secure AI patterns the default.
- Advise engineers and executives on AI architecture, emerging risks, and security roadmaps.
Requirements
- 7+ years of security engineering experience, including 2+ years focused on AI/ML or LLM application security.
- Demonstrated experience securing a production AI or ML system across development, deployment, and runtime.
- Strong understanding of transformer architectures, inference pipelines, RAG, prompt engineering, and the OWASP Top 10 for LLMs.
- Production programming proficiency in Python or Go, with experience building integrations and security pipelines.
- Hands-on expertise in adversarial ML and LLM risks, including prompt injection, model poisoning, data extraction, unsafe tool use, and red teaming.
- Strong application and cloud security fundamentals, including AWS and/or GCP, Kubernetes, IAM, API security, and DevSecOps practices.
- Experience threat modeling complex distributed systems and driving remediation with engineering teams.
- Strong strategic communication skills for translating technical AI risk into business impact.
- Nice-to-have experience with multi-agent systems, MCP architectures, MITRE ATLAS, NIST AI RMF, LLM evaluation and safety-testing harnesses, regulated or consumer-data-heavy environments, or secure-by-default AI SDKs.
Benefits
- Base pay range is $210,000–$234,000, with potential bonuses and restricted stock units excluded from the stated base range.
- Benefits include paid vacation, holidays, sick time, parental leave, recharge leave, medical, tele-health, dental and vision coverage, a 401(k), FSAs, commuter benefits, life and disability insurance, Maven, Carrot, UrbanSitter, an Employee Assistance Program, and pet insurance.
Categories
About Compass
Compass is a residential real estate brokerage and technology company that builds an end-to-end platform for agents and their clients. It earns primarily from brokerage commissions while providing CRM, marketing, listings, and transaction tools to help agents serve home buyers and sellers. Founded in 2012 and headquartered in New York City, Compass operates across major U.S. markets and is publicly traded on the NYSE.