3 months ago
Base Salary
$210k - $234k/yr
Responsibilities
- Build, enhance, and support automated application security testing frameworks and tooling integrated with CI/CD pipelines.
- Evaluate solution architectures and codebases and provide secure-by-design technical guidance to engineering teams.
- Serve as a product security subject matter expert for product features, development processes, tooling, and services.
- Advocate for secure-by-design approaches and mature the organization’s security culture.
- Develop collaborative relationships with Product and Engineering teams while supporting delivery goals.
- Drive AI-powered security capabilities, AI Security Posture Management frameworks, and secure-by-design standards for AI integration.
- Address emerging AI security threats including prompt injection, model or data exfiltration, and unsanctioned shadow AI usage.
- Stay current with security and engineering trends and adopt technologies that improve security capabilities.
Requirements
- Bachelor’s degree in Computer Science or a related technical field, or equivalent practical work experience.
- At least three years of experience administering and configuring CI/CD pipeline tools.
- At least three years of experience administering and tuning SAST, DAST, or SCA application security testing tools.
- At least three years of experience with Python or Bash automation scripting.
- At least three years of product development experience using Python, JavaScript, TypeScript, Golang, or Java.
- At least three years of experience performing security code reviews for Python, JavaScript, TypeScript, Golang, or Java solutions.
- Experience participating in security-focused reviews for vendor and custom business solutions.
- Hands-on experience with Infrastructure as Code tools such as Terraform.
- Practical experience with AWS services for product delivery and security objectives.
- Hands-on experience using Artificial Intelligence to support product security processes and operational efficiency.
- Relevant certifications such as CEH, CISSP, CSSLP, GIAC, or cloud security certifications are preferred.
- Preferred experience includes DevOps and Agile environments, Layer 7 security controls, multi-cloud security across AWS, Azure, and GCP, AI technology assessments, SOX-adjacent controls and audits, and security work during mergers, acquisitions, or infrastructure consolidations.
Benefits
- Base pay range is $210,000–$234,100, with potential bonuses and restricted stock units.
- Paid vacation, holidays, sick time, parental leave, and recharge leave.
- Medical, tele-health, dental, and vision benefits.
- 401(k), flexible spending accounts, commuter program, life and disability insurance, and pet insurance.
- Maven new-parent support, Carrot fertility benefits, UrbanSitter caregiver referrals, and an Employee Assistance Program.
Categories
About Compass
Compass is a residential real estate brokerage and technology company that builds an end-to-end platform for agents and their clients. It earns primarily from brokerage commissions while providing CRM, marketing, listings, and transaction tools to help agents serve home buyers and sellers. Founded in 2012 and headquartered in New York City, Compass operates across major U.S. markets and is publicly traded on the NYSE.