3 months ago
Base Salary
$210k - $234k/yr
Responsibilities
- Build, enhance, and support automated application-security testing frameworks and tooling.
- Integrate application-security capabilities into continuous integration and delivery pipelines.
- Evaluate solution architectures and codebases and provide secure-by-design technical guidance.
- Serve as a security subject matter expert for product and engineering teams.
- Conduct security guidance and risk evaluations for product features, development processes, tooling, and services.
- Promote secure-by-design practices and mature the organization’s security culture.
- Adopt AI-powered security capabilities such as code and infrastructure-as-code scanning copilots and automated triage.
- Establish AI Security Posture Management frameworks and standards for safely integrating AI into products and protecting enterprise data.
- Address emerging threats including prompt injection, model and data exfiltration, and unsanctioned shadow AI usage.
- Collaborate with product and engineering teams and stay current with evolving security technologies.
Requirements
- Bachelor’s degree in Computer Science or a related technical field, or equivalent practical work experience.
- At least three years of experience administering and configuring automated pipeline tools.
- At least three years of experience administering and tuning SAST, DAST, or SCA tools.
- At least three years of experience with Python or Bash automation scripting.
- At least three years of product-development experience with Python, JavaScript, TypeScript, Golang, or Java.
- At least three years of experience performing security code reviews for applications built with Python, JavaScript, TypeScript, Golang, or Java.
- At least three years of experience participating in security-focused reviews of vendor and custom business solutions.
- Hands-on experience with Infrastructure as Code tools such as Terraform.
- Practical experience with AWS services and aligning product delivery with security objectives.
- Hands-on experience using artificial intelligence to improve product-security processes and operational efficiency.
- Relevant certifications such as CEH, CISSP, CSSLP, GIAC, or cloud-security certifications are preferred.
- Experience with DevOps and Agile cultures, Layer 7 security controls, multi-cloud security across AWS, Azure, and GCP, AI-technology assessments, SOX-adjacent controls and audits, or security during mergers and infrastructure consolidation is preferred.
Benefits
- Participation in incentive programs that may include eligible cash, equity, or commissions.
- Paid vacation, holidays, sick time, parental leave, and recharge leave.
- Medical, tele-health, dental, and vision benefits.
- 401(k) plan and flexible spending accounts.
- Commuter program, life and disability insurance, employee assistance, and pet insurance.
- Maven support for new parents, Carrot fertility benefits, and UrbanSitter caregiver referral services.
Categories
About Compass
Compass is a residential real estate brokerage and technology company that builds an end-to-end platform for agents and their clients. It earns primarily from brokerage commissions while providing CRM, marketing, listings, and transaction tools to help agents serve home buyers and sellers. Founded in 2012 and headquartered in New York City, Compass operates across major U.S. markets and is publicly traded on the NYSE.