3 months ago
Base Salary
$210k - $234k/yr
Responsibilities
- Build, enhance, and support automated application security testing frameworks and tooling within CI/CD pipelines.
- Evaluate solution architectures and codebases and provide secure-by-design technical guidance to engineering teams.
- Serve as a security subject matter expert for product features, development processes, tooling, and services.
- Advocate for product security and mature secure-by-design practices across Product and Engineering.
- Drive AI-powered security capabilities, including code and Infrastructure as Code scanning copilots and automated triage.
- Establish AI Security Posture Management frameworks and standards for safely integrating AI into products and protecting enterprise data.
- Collaborate with product and engineering teams to achieve delivery goals without compromising security.
- Stay current with security and engineering trends and adopt technologies that improve security capabilities.
Requirements
- Bachelor’s degree in Computer Science or a related technical field, or equivalent practical work experience.
- At least three years of experience administering and configuring CI/CD pipeline tools.
- At least three years of experience administering and tuning SAST, DAST, or SCA application security testing tools.
- At least three years of experience with Python or Bash automation scripting.
- At least three years of product development experience using Python, JavaScript, TypeScript, Golang, or Java.
- At least three years of experience conducting security code reviews for applications built with Python, JavaScript, TypeScript, Golang, or Java.
- Experience participating in security reviews for vendor and custom business solutions.
- Hands-on Infrastructure as Code experience, such as Terraform, for provisioning secure and reproducible infrastructure.
- Practical experience with AWS services in product delivery and security contexts.
- Hands-on experience using Artificial Intelligence to support product security processes and operational efficiency.
- Relevant certifications such as CEH, CISSP, CSSLP, GIAC, or cloud security certifications are preferred.
- Experience with DevOps and Agile cultures, Layer 7 controls, multi-cloud security across AWS, Azure, and GCP, AI technology assessments, publicly traded company controls and audits, or security work during mergers or infrastructure consolidations is preferred.
Benefits
- Potential participation in incentive programs including eligible cash, equity, or commissions.
- Paid vacation, holidays, sick time, parental leave, and recharge leave.
- Medical, tele-health, dental, and vision benefits.
- 401(k), flexible spending accounts, commuter program, life and disability insurance, pet insurance, and an Employee Assistance Program.
- Maven support for new parents, Carrot fertility benefits, and UrbanSitter caregiver referrals.
- Base pay range of $210,000–$234,100, with potential bonuses and restricted stock units.
Categories
About Compass
Compass is a residential real estate brokerage and technology company that builds an end-to-end platform for agents and their clients. It earns primarily from brokerage commissions while providing CRM, marketing, listings, and transaction tools to help agents serve home buyers and sellers. Founded in 2012 and headquartered in New York City, Compass operates across major U.S. markets and is publicly traded on the NYSE.