Senior Security Engineer II

At Compass, our mission is to help everyone find their place in the world. Founded in 2012, we’re revolutionizing the real estate industry with our end-to-end platform that empowers residential real estate agents to deliver exceptional service to seller and buyer clients. Senior Security Engineer, Cloud Security Security @ Compass We are hands-on security engineers helping to build secure, resilient, and scalable web apps, mobile apps, and platform for the real estate industry. We work with a diverse set of teams to provide and support transparent and automated security tooling and services. We architect secure web products, perform simulated attacks, identify weaknesses, and work with teams to remediate and protect our products. You will lead our effort to build security as a service to drive safe-by-default environments and drive customer trust. What you will do: This role blends strategic partnership, hands-on engineering, infrastructure security, and automation. Empower engineers with safe-by-default tooling, ensuring engineering velocity by automating security requirements and building robust guardrails. Design and implement scalable systems and controls to secure our cloud infrastructure effectively. Collaborate closely with engineering and security teams to drive the deployment of critical security enhancements and control changes across our cloud infrastructure. [... source excerpt omitted ...] . Experience with threat modeling and architectural review processes; you have a track record of identifying potential attack vectors early in the development lifecycle. Minimum Qualifications: Experience: At least 5+ years of experience in a security-related role, with at least 2+ years specifically focused on cloud security. Technical Skills: Strong understanding of cloud platforms and security features, particularly AWS (IAM, EC2, VPC, container services like ECR, ECS, and EKS), with foundational knowledge of Azure and/or GCP Strong understanding of Azure services and how to secure them. Proven experience with a CNAPP or similar cloud security tool (e.g., Wiz, Orca Security,