C
Compass
Senior Security Engineer (Enterprise)
Skills
PythonGolangGitAIComplianceTerraform
15 days ago
Share this opportunity
Share this opportunity to other talents of your network:
✓ Offer them a visibility boost with clients.
✓ Help your contacts find their next job.
Important information
Contract type:
Permanent
Salary:
$175,000 – $196,000 / year
Location:
New York, NY, USA
Work mode:
Onsite
Published on:
4 October 2026
What they need
- Ensure Safe-by-Default Environments: Empower team members by securing all enterprise technologies, including SaaS applications, corporate endpoints, office networks, and Business/Data Intelligence tools
- Modernize Endpoint Management: Work across endpoint management, identity, and security operations to improve how Compass manages macOS, iOS, Windows, and Linux devices. In your first year, you will strengthen endpoint security architecture, expand automation, and improve the reliability and auditability of control deployments
- Drive GitOps & IaC Workflows: Manage endpoint and SaaS security configurations through Terraform, version control, merge requests, continuous integration (CI) pipelines, and automated rollouts
- Automate Lifecycle Security: Design and support automation for secure endpoint deployment, configuration, patching, and software distribution that aligns with strict security and operational compliance
- Govern AI & MCP Security: Manage AI guardrails for business applications and Model Context Protocol (MCP) server management. Enforce secure MCP usage, conduct prompt security evaluations, review vibe-coded apps, and manage approved AI agents and endpoint tools to reduce the risk surface
- Assess Third-Party & AI Risk: Evaluate the security properties and AI-feature risks of 3rd-party systems integrating into our enterprise environment. Provide comprehensive architecture, design, and process automation reviews
- Partner on Detection & Response: Collaborate with the Detection and Response team to select corporate focus areas, develop incident workflows, and implement new solutions to thwart business email compromise (BEC)
- Iterate and Improve: Conduct regular security assessments on controls and applications, and provide the foundational security principles and tooling necessary to support our rapidly growing agent population and expansion into new markets- Infrastructure-as-Code Expert: Strong hands-on ability with Terraform and GitOps practices, including module design, state management, code reviews, and pipeline-based deployments
- Empathetic & Accountable: You bring a practical, security-focused approach to problem solving, building customer trust while helping to improve the overall security program
- Threat Modeler: You enjoy collaborating on threat modeling exercises and are driven to solve new challenges as Compass’s architecture rapidly evolves
- Endpoint & Systems Specialist: Deep knowledge of endpoint management platforms (such as Jamf Pro, FleetDM, MDM, or EDR), particularly in architecting and securing macOS environments at scale
- Clear Communicator: Able to articulate security vulnerabilities, remediation techniques, and technical protocol functions (SAML, SCIM, OAuth, OIDC, SMTP, DNS) in an accessible way across a distributed, all-remote workforce
- SaaS & Identity Practitioner: Experienced in configuring security controls for cloud identity providers (Okta, Google Workspace, LDAP), SSOs, Data Loss Prevention, and Firewalls. You have specific experience managing Okta tool usage and MCPs
- Security Leader: Comfortable teaching and guiding development teams toward better security outcomes. You are open to bringing transferable experience from adjacent security, systems, or platform engineering backgrounds
- Automation-First Engineer: You have strong proficiency in scripting or programming (Python or Go) and leverage automation to solve the challenges of scale
- We don’t expect any single candidate to check every box. You do not need to meet 100% of these qualifications to apply. We are primarily looking for deep, practical experience in at least one of our core domains—such as endpoint management, identity, AI security, or Infrastructure-as-Code—along with a strong desire to learn the rest. If you are passionate about solving complex security challenges and eager to grow alongside Compass, we highly encourage you to submit your application
Other offers great for you!
These companies are also looking for great profiles
V
Visian
Ingénieur Sécurité Opérationnelle SIEM
Freelance
Paris, France
Hybrid
Skills
PythonSecurity incident responseSIEMThreat huntingDigital forensicsPowerShell
7 days ago
Quick apply
L
LeHibou
Ingénieur Sécurité Reseau N2-N3
480€ / jour
Freelance
91300 Massy, France
Hybrid
Skills
CybersecurityNetwork Engineer
7 days ago
Quick apply
V
Visian
Ingénieur Sécurité DDoS - Banque
Freelance
Paris, France
Hybrid
Skills
ITILDDoS protectionIncident managementRoot cause analysisInfrastructure monitoringPerimeter security
4 days ago
Quick apply
No company information available.