Staff Security Engineer, Product Security and Architecture

The role

You will build and support automated application security testing frameworks and tooling for CI/CD pipelines. You will partner with engineering teams to evaluate architectures and provide technical security guidance for product features.

What you will do

• Build, enhance, and support automated application security testing frameworks and tooling.
• Partner with engineering teams to evaluate solution architectures and codebases.
• Act as a security advisor and subject matter expert for product and engineering teams.
• Advocate for secure-by-design approaches across the organizations.
• Build collaborative relationships across the Product and Engineering organization.
• Drive adoption of AI-powered security capabilities.
• Establish AI Security Posture Management frameworks and secure-by-design standards.
• Adopt new technologies to ensure security capabilities keep pace with business objectives.

Required qualifications

• Bachelor’s degree in Computer Science, a related technical field, or equivalent practical work experience.
• Minimum of three (3) years of experience administering and configuring automated pipeline tools (CI/CD).
• Minimum of three (3) years of experience administering and tuning application security testing tools (e.g., SAST, DAST, or SCA).
• Minimum of three (3) years of experience in automation scripting using Python or Bash.
• Minimum of three (3) years of experience in product development using Python, JavaScript, TypeScript, Golang, or Java.
• Minimum of three (3) years of experience performing security code reviews for solutions built in Python, JavaScript, TypeScript, Golang, or Java.
• Minimum of three (3) years of experience participating in security-focused reviews for both vendor and custom business solutions.
• Minimum of three (3) years of hands-on experience with Infrastructure as Code (IaC) tools (e.g., Terraform).
• Minimum of three (3) years of practical experience working with AWS services.
• Minimum of three (3) years of hands-on experience using Artificial Intelligence (AI) to assist with product security processes.

Nice to have

• Relevant industry certifications (e.g., CEH, CISSP, CSSLP, GIAC, or cloud security certifications)
• Direct experience working within high-performing DevOps and Agile cultures.
• Experience with Layer 7 security controls (e.g., Web Application Firewalls (WAF), API Gateways, OAuth2/OIDC implementation, and rate limiting).
• Experience driving secure-by-design practices across multi-cloud strategies (e.g., AWS, Azure, GCP).
• Experience reviewing and assessing the use of AI technologies within both vendor-provided and custom-developed business solutions.
• Experience operating in a publicly traded company, including familiarity with SOX-adjacent control environments and audit processes.
• Experience securing environments through a merger, acquisition, or major infrastructure consolidation.

Benefits

• Incentive programs (which may include eligible cash, equity, or commissions)
• Paid vacation
• Holidays
• Sick time
• Parental leave
• Recharge leave
• Medical, tele-health, dental and vision benefits
• 401(k) plan
• Flexible spending accounts (FSAs)
• Commuter program
• Life and disability insurance
• Maven (a support system for new parents)

About the company

Compass International Holdings (CIH) is the largest residential real estate platform in the world, established by the January 2026 merger of Compass and Anywhere Real Estate.