Base Salary
$210k - $234k/yr
Responsibilities
- Build, enhance, and support automated application security testing frameworks and tooling integrated with CI/CD pipelines.
- Evaluate solution architectures and codebases and provide secure-by-design technical guidance to engineering teams.
- Serve as a product security subject matter expert for product features, development processes, tooling, and services.
- Advocate for secure-by-design approaches and mature the organization’s security culture.
- Develop collaborative relationships with Product and Engineering teams while supporting delivery goals.
- Drive AI-powered security capabilities, AI Security Posture Management frameworks, and secure-by-design standards for AI integration.
- Address emerging AI security threats including prompt injection, model or data exfiltration, and unsanctioned shadow AI usage.
- Stay current with security and engineering trends and adopt technologies that improve security capabilities.
Requirements
- Bachelor’s degree in Computer Science or a related technical field, or equivalent practical work experience.
- At least three years of experience administering and configuring CI/CD pipeline tools.
- At least three years of experience administering and tuning SAST, DAST, or SCA application security testing tools.
- At least three years of experience with Python or Bash automation scripting.
- At least three years of product development experience using Python, JavaScript, TypeScript, Golang, or Java.
- At least three years of experience performing security code reviews for Python, JavaScript, TypeScript, Golang, or Java solutions.
- Experience participating in security-focused reviews for vendor and custom business solutions.
- Hands-on experience with Infrastructure as Code tools such as Terraform.
- Practical experience with AWS services for product delivery and security objectives.
- Hands-on experience using Artificial Intelligence to support product security processes and operational efficiency.
- Relevant certifications such as CEH, CISSP, CSSLP, GIAC, or cloud security certifications are preferred.
- Preferred experience includes DevOps and Agile environments, Layer 7 security controls, multi-cloud security across AWS, Azure, and GCP, AI technology assessments, SOX-adjacent controls and audits, and security work during mergers, acquisitions, or infrastructure consolidations.
Benefits
- Base pay range is $210,000–$234,100, with potential bonuses and restricted stock units.
- Paid vacation, holidays, sick time, parental leave, and recharge leave.
- Medical, tele-health, dental, and vision benefits.
- 401(k), flexible spending accounts, commuter program, life and disability insurance, and pet insurance.
- Maven new-parent support, Carrot fertility benefits, UrbanSitter caregiver referrals, and an Employee Assistance Program.
Categories
About Compass
Compass is a real estate technology company with a powerful end-to-end platform that supports the entire buying and selling workflow. We deliver an incomparable experience to both agents and their clients all in service of the Compass mission: to help everyone find their place in the world. Founded in 2012 by Ori Allon and Robert Reffkin, Compass operates in 22+ regions across the United States including New York, Los Angeles and Orange County, Chicago, San Francisco, Boston, Washington D.C., South Florida, The Hamptons, Santa Barbara & Montecito, San Diego, Seattle & Eastside, Philadelphia, Connecticut, Westchester, Aspen, Boulder, Denver, Atlanta, Austin & Central Texas, Dallas-Fort Worth, Houston, Nashville, and Lake Tahoe. Learn more and find your place at www.compass.com and www.compass.com/careers. Compass only reaches out to applicants from a @compass.com domain and does not prompt applicants to download software or files as part of its application process.