Base Salary
$210k - $234k/yr
Responsibilities
- Build, enhance, and support automated application-security testing frameworks and tooling.
- Integrate application-security capabilities into continuous integration and delivery pipelines.
- Evaluate solution architectures and codebases and provide secure-by-design technical guidance.
- Serve as a security subject matter expert for product and engineering teams.
- Conduct security guidance and risk evaluations for product features, development processes, tooling, and services.
- Promote secure-by-design practices and mature the organization’s security culture.
- Adopt AI-powered security capabilities such as code and infrastructure-as-code scanning copilots and automated triage.
- Establish AI Security Posture Management frameworks and standards for safely integrating AI into products and protecting enterprise data.
- Address emerging threats including prompt injection, model and data exfiltration, and unsanctioned shadow AI usage.
- Collaborate with product and engineering teams and stay current with evolving security technologies.
Requirements
- Bachelor’s degree in Computer Science or a related technical field, or equivalent practical work experience.
- At least three years of experience administering and configuring automated pipeline tools.
- At least three years of experience administering and tuning SAST, DAST, or SCA tools.
- At least three years of experience with Python or Bash automation scripting.
- At least three years of product-development experience with Python, JavaScript, TypeScript, Golang, or Java.
- At least three years of experience performing security code reviews for applications built with Python, JavaScript, TypeScript, Golang, or Java.
- At least three years of experience participating in security-focused reviews of vendor and custom business solutions.
- Hands-on experience with Infrastructure as Code tools such as Terraform.
- Practical experience with AWS services and aligning product delivery with security objectives.
- Hands-on experience using artificial intelligence to improve product-security processes and operational efficiency.
- Relevant certifications such as CEH, CISSP, CSSLP, GIAC, or cloud-security certifications are preferred.
- Experience with DevOps and Agile cultures, Layer 7 security controls, multi-cloud security across AWS, Azure, and GCP, AI-technology assessments, SOX-adjacent controls and audits, or security during mergers and infrastructure consolidation is preferred.
Benefits
- Participation in incentive programs that may include eligible cash, equity, or commissions.
- Paid vacation, holidays, sick time, parental leave, and recharge leave.
- Medical, tele-health, dental, and vision benefits.
- 401(k) plan and flexible spending accounts.
- Commuter program, life and disability insurance, employee assistance, and pet insurance.
- Maven support for new parents, Carrot fertility benefits, and UrbanSitter caregiver referral services.
Categories
About Compass
Compass is a real estate technology company with a powerful end-to-end platform that supports the entire buying and selling workflow. We deliver an incomparable experience to both agents and their clients all in service of the Compass mission: to help everyone find their place in the world. Founded in 2012 by Ori Allon and Robert Reffkin, Compass operates in 22+ regions across the United States including New York, Los Angeles and Orange County, Chicago, San Francisco, Boston, Washington D.C., South Florida, The Hamptons, Santa Barbara & Montecito, San Diego, Seattle & Eastside, Philadelphia, Connecticut, Westchester, Aspen, Boulder, Denver, Atlanta, Austin & Central Texas, Dallas-Fort Worth, Houston, Nashville, and Lake Tahoe. Learn more and find your place at www.compass.com and www.compass.com/careers. Compass only reaches out to applicants from a @compass.com domain and does not prompt applicants to download software or files as part of its application process.