Senior Security Engineer - Enterprise

The role

The Senior Security Engineer will secure enterprise technologies including SaaS applications, corporate endpoints, office networks, and Business/Data Intelligence tools. You will manage endpoint and SaaS security configurations using Terraform and GitOps, automate lifecycle security, and govern AI and MCP security.

What you will do

• Secure enterprise technologies including SaaS applications, corporate endpoints, office networks, and Business/Data Intelligence tools
• Improve management of macOS, iOS, Windows, and Linux devices
• Manage endpoint and SaaS security configurations through Terraform, version control, merge requests, continuous integration (CI) pipelines, and automated rollouts
• Design and support automation for secure endpoint deployment, configuration, patching, and software distribution
• Manage AI guardrails for business applications and Model Context Protocol (MCP) server management
• Enforce secure MCP usage, conduct prompt security evaluations, review vibe-coded apps, and manage approved AI agents and endpoint tools
• Evaluate the security properties and AI-feature risks of 3rd-party systems
• Provide architecture, design, and process automation reviews
• Collaborate with the Detection and Response team to develop incident workflows and implement solutions to thwart business email compromise (BEC)
• Conduct regular security assessments on controls and applications

Required qualifications

• Proficiency in scripting or programming (Python or Go)
• Hands-on ability with Terraform and GitOps practices, including module design, state management, code reviews, and pipeline-based deployments
• Knowledge of endpoint management platforms (such as Jamf Pro, FleetDM, MDM, or EDR)
• Experience architecting and securing macOS environments at scale
• Experience configuring security controls for cloud identity providers (Okta, Google Workspace, LDAP), SSOs, Data Loss Prevention, and Firewalls
• Experience managing Okta tool usage and MCPs
• Ability to articulate security vulnerabilities, remediation techniques, and technical protocol functions (SAML, SCIM, OAuth, OIDC, SMTP, DNS)

Nice to have

• Deep, practical experience in at least one core domain such as endpoint management, identity, AI security, or Infrastructure-as-Code

Benefits

• Incentive programs (which may include eligible cash, equity, or commissions)
• Paid vacation
• Holidays
• Sick time
• Parental leave
• Recharge leave
• Medical, tele-health, dental and vision benefits
• 401(k) plan
• Flexible spending accounts (FSAs)
• Commuter program
• Life and disability insurance
• Maven (a support system for new parents)

About the company

Compass is a technology company building an end-to-end real estate platform. Founded in 2012, it integrates agents, buyers and sellers through technology.