Base Salary
$210k - $234k/yr
Responsibilities
- Build, enhance, and support automated application security testing frameworks and tooling within CI/CD pipelines.
- Evaluate solution architectures and codebases and provide secure-by-design technical guidance to engineering teams.
- Serve as a security subject matter expert for product features, development processes, tooling, and services.
- Advocate for product security and mature secure-by-design practices across Product and Engineering.
- Drive AI-powered security capabilities, including code and Infrastructure as Code scanning copilots and automated triage.
- Establish AI Security Posture Management frameworks and standards for safely integrating AI into products and protecting enterprise data.
- Collaborate with product and engineering teams to achieve delivery goals without compromising security.
- Stay current with security and engineering trends and adopt technologies that improve security capabilities.
Requirements
- Bachelor’s degree in Computer Science or a related technical field, or equivalent practical work experience.
- At least three years of experience administering and configuring CI/CD pipeline tools.
- At least three years of experience administering and tuning SAST, DAST, or SCA application security testing tools.
- At least three years of experience with Python or Bash automation scripting.
- At least three years of product development experience using Python, JavaScript, TypeScript, Golang, or Java.
- At least three years of experience conducting security code reviews for applications built with Python, JavaScript, TypeScript, Golang, or Java.
- Experience participating in security reviews for vendor and custom business solutions.
- Hands-on Infrastructure as Code experience, such as Terraform, for provisioning secure and reproducible infrastructure.
- Practical experience with AWS services in product delivery and security contexts.
- Hands-on experience using Artificial Intelligence to support product security processes and operational efficiency.
- Relevant certifications such as CEH, CISSP, CSSLP, GIAC, or cloud security certifications are preferred.
- Experience with DevOps and Agile cultures, Layer 7 controls, multi-cloud security across AWS, Azure, and GCP, AI technology assessments, publicly traded company controls and audits, or security work during mergers or infrastructure consolidations is preferred.
Benefits
- Potential participation in incentive programs including eligible cash, equity, or commissions.
- Paid vacation, holidays, sick time, parental leave, and recharge leave.
- Medical, tele-health, dental, and vision benefits.
- 401(k), flexible spending accounts, commuter program, life and disability insurance, pet insurance, and an Employee Assistance Program.
- Maven support for new parents, Carrot fertility benefits, and UrbanSitter caregiver referrals.
- Base pay range of $210,000–$234,100, with potential bonuses and restricted stock units.
Categories
About Compass
Compass is a real estate technology company with a powerful end-to-end platform that supports the entire buying and selling workflow. We deliver an incomparable experience to both agents and their clients all in service of the Compass mission: to help everyone find their place in the world. Founded in 2012 by Ori Allon and Robert Reffkin, Compass operates in 22+ regions across the United States including New York, Los Angeles and Orange County, Chicago, San Francisco, Boston, Washington D.C., South Florida, The Hamptons, Santa Barbara & Montecito, San Diego, Seattle & Eastside, Philadelphia, Connecticut, Westchester, Aspen, Boulder, Denver, Atlanta, Austin & Central Texas, Dallas-Fort Worth, Houston, Nashville, and Lake Tahoe. Learn more and find your place at www.compass.com and www.compass.com/careers. Compass only reaches out to applicants from a @compass.com domain and does not prompt applicants to download software or files as part of its application process.