Senior Security Engineer - Enterprise

The role

This person will secure enterprise technologies including SaaS applications, corporate endpoints, office networks, and Business/Data Intelligence tools. They will manage endpoint management, identity, and AI security using automation and Infrastructure-as-Code.

What you will do

• Secure all enterprise technologies including SaaS applications, corporate endpoints, office networks, and Business/Data Intelligence tools.
• Improve how Compass manages macOS, iOS, Windows, and Linux devices.
• Manage endpoint and SaaS security configurations through Terraform, version control, merge requests, continuous integration (CI) pipelines, and automated rollouts.
• Design and support automation for secure endpoint deployment, configuration, patching, and software distribution.
• Manage AI guardrails for business applications and Model Context Protocol (MCP) server management.
• Enforce secure MCP usage, conduct prompt security evaluations, review vibe-coded apps, and manage approved AI agents and endpoint tools.
• Evaluate the security properties and AI-feature risks of 3rd-party systems integrating into the enterprise environment.
• Provide architecture, design, and process automation reviews.
• Collaborate with the Detection and Response team to develop incident workflows and implement solutions to thwart business email compromise (BEC).
• Conduct regular security assessments on controls and applications.

Required qualifications

• Proficiency in scripting or programming (Python or Go).
• Hands-on ability with Terraform and GitOps practices, including module design, state management, code reviews, and pipeline-based deployments.
• Knowledge of endpoint management platforms (such as Jamf Pro, FleetDM, MDM, or EDR).
• Experience architecting and securing macOS environments at scale.
• Experience configuring security controls for cloud identity providers (Okta, Google Workspace, LDAP), SSOs, Data Loss Prevention, and Firewalls.
• Experience managing Okta tool usage and MCPs.
• Ability to articulate security vulnerabilities, remediation techniques, and technical protocol functions (SAML, SCIM, OAuth, OIDC, SMTP, DNS).

Nice to have

• Deep, practical experience in at least one core domain such as endpoint management, identity, AI security, or Infrastructure-as-Code

Benefits

• Incentive programs (which may include eligible cash, equity, or commissions)
• Paid vacation
• Holidays
• Sick time
• Parental leave
• Recharge leave
• Medical
• Tele-health
• Dental
• Vision benefits
• 401(k) plan
• Flexible spending accounts (FSAs)

About the company

Compass is a technology company building an end-to-end real estate platform. Founded in 2012, it integrates agents, buyers and sellers through technology.