Senior Identity Security Engineer (Arlington, VA or San Diego, CA)
CoStar GroupBase Salary
$133k - $203k/yr
Responsibilities
- Design, implement, and continuously improve identity security controls across multiple platforms.
- Develop and maintain conditional access policies for authentication strength, device compliance, privileged roles, sensitive applications, and workload identities.
- Analyze logs to scope and guide security-initiative rollouts.
- Support an organization-wide, multi-platform phishing-resistant authentication rollout.
- Engineer controls for AI and workload identities, including service principals, managed identities, and OAuth app registrations.
- Research and operationalize AI-assisted tooling and agentic workflows, including automation and internal identity-risk tools.
- Document projects, standards, and runbooks.
- Communicate with technical and non-technical stakeholders.
- Participate in attack path management using commercial and open-source tools.
- Monitor the identity threat landscape and identity-defense offerings from major identity-provider vendors.
Requirements
- Bachelor’s degree from an accredited, not-for-profit, in-person university or college.
- At least 4 years of hands-on security engineering experience, including implementing new controls to address threats.
- Thorough understanding of adversary-in-the-middle attacks, Evilginx, social engineering, and offensive privilege escalation techniques.
- Hands-on administration experience with Okta, PingID, Microsoft Entra ID, and Active Directory.
- Knowledge of SAML, OAuth, OIDC, and Kerberos.
- Understanding of PKI, FIDO2, passkeys, Windows Hello for Business, Platform SSO, Okta FastPass, and Okta Device Trust.
- Knowledge of role-based access control, least privilege, just-in-time access, and related identity-security paradigms.
- Experience analyzing SIEM logs and creating dashboards.
- Ability to read and write basic scripts in Python, PowerShell, Bash, or another common language.
- Strong analytical, problem-solving, written-communication, and verbal-communication skills.
- Preferred experience with Microsoft Intune, Jamf, JumpCloud, or other MDM platforms.
- Preferred experience with BloodHound, AzureHound, SharpHound, Responder, or similar identity-security testing tools.
- Preferred experience automating operational tasks, configuring risk-based conditional-access or authentication policies, and governing workload identities.
- Preferred familiarity with CI/CD infrastructure and AI/ML-assisted security tooling, including LLM-based agents.
- Demonstrated commitment to prior employers.
Benefits
- Comprehensive medical, vision, dental, prescription-drug, life, legal, and supplemental insurance coverage.
- Virtual and in-person mental-health counseling for individuals and families.
- Commuter and parking benefits.
- 401(k) retirement plan with matching contributions.
- Employee stock purchase plan and paid time off.
- Tuition reimbursement and internal professional-development training.
- On-site fitness center and/or reimbursed fitness-center membership costs, depending on location.
- Employee Resource Groups and complimentary coffee, tea, hot chocolate, fresh fruit, and other healthy snacks.
- Located in Arlington, VA or San Diego, CA; in office Monday through Thursday and work from home Friday.
About CoStar Group
CoStar Group (NASDAQ: CSGP) is a global leader in commercial real estate information, analytics, online marketplaces, and 3D digital twin technology. Founded in 1986, CoStar Group is dedicated to digitizing the world’s real estate, empowering all people to discover properties, insights, and connections that improve their businesses and lives. CoStar Group’s major brands include CoStar, a leading global provider of commercial real estate data, analytics, and news; LoopNet, the most trafficked commercial real estate marketplace; Apartments.com, the leading platform for apartment rentals; Homes.com, the fastest-growing residential real estate marketplace; and Domain, one of Australia’s leading property marketplaces. CoStar Group’s industry-leading brands also include Matterport, a leading spatial data company whose platform turns buildings into data to make every space more valuable and accessible, STR, a global leader in hospitality data and benchmarking; Ten-X, an online platform for commercial real estate auctions and negotiated bids; and OnTheMarket, a leading residential property portal in the United Kingdom. CoStar Group’s websites attracted over 143 million average monthly unique visitors in the third quarter of 2025, serving clients around the world. Headquartered in Arlington, Virginia, CoStar Group is committed to transforming the real estate industry through innovative technology and comprehensive market intelligence. From time to time, we plan to utilize our corporate website as a channel of distribution for material company information. For more information, visit CoStarGroup.com.