Senior Security Engineer (Enterprise)

Compass as a Senior Security Engineer (Enterprise) and play a crucial role in ensuring the security of all enterprise technologies. You will modernize endpoint management, drive GitOps and IaC workflows, automate lifecycle security, govern AI and MCP security, assess third-party and AI risk, partner on detection and response, and iterate and improve security controls and applications.

About Compass

Gérer les configurations de sécurité des points de terminaison et des SaaS à l'aide de Terraform, de la gestion de version, des demandes de fusion, des pipelines d'intégration continue et des déploiements automatisés.

We recognize that the most innovative teams are built from diverse backgrounds and unique skill sets, which is why we don't expect any single candidate to check every box. You do not need to meet 100% of these qualifications to apply

Infrastructure-as-Code Expert: Strong hands-on ability with Terraform and GitOps practices, including module design, state management, code reviews, and pipeline-based deployments

Threat Modeler: You enjoy collaborating on threat modeling exercises and are driven to solve new challenges as Compass’s architecture rapidly evolves

Clear Communicator: Able to articulate security vulnerabilities, remediation techniques, and technical protocol functions (SAML, SCIM, OAuth, OIDC, SMTP, DNS) in an accessible way across a distributed, all-remote workforce

Responsibilities

• You should have strong hands-on experience with Terraform and GitOps practices, experience in configuring security controls for cloud identity providers, and a practical, security-focused approach to problem-solving.
• Assurer des environnements sécurisés par défaut en sécurisant toutes les technologies d'entreprise, y compris les applications SaaS, les points de terminaison d'entreprise, les réseaux de bureau et les outils d'intelligence d'affaires.
• Moderniser la gestion des points de terminaison en améliorant la manière dont l'entreprise gère les appareils macOS, iOS, Windows et Linux, en renforçant l'architecture de sécurité des points de terminaison et en améliorant l'automatisation.

Requirements

• SaaS & Identity Practitioner: Experienced in configuring security controls for cloud identity providers (Okta, Google Workspace, LDAP), SSOs, Data Loss Prevention, and Firewalls. You have specific experience managing Okta tool usage and MCPs
• Empathetic & Accountable: You bring a practical, security-focused approach to problem solving, building customer trust while helping to improve the overall security program
• Security Leader: Comfortable teaching and guiding development teams toward better security outcomes. You are open to bringing transferable experience from adjacent security, systems, or platform engineering backgrounds
• Endpoint & Systems Specialist: Deep knowledge of endpoint management platforms (such as Jamf Pro, FleetDM, MDM, or EDR), particularly in architecting and securing macOS environments at scale

Preferred

• Automation-First Engineer: You have strong proficiency in scripting or programming (Python or Go) and leverage automation to solve the challenges of scale

Pay

USD 175,000 - 196,000