Senior Security Engineer (Enterprise)

Join Compass as a Senior Security Engineer (Enterprise) and play a crucial role in ensuring the security of all enterprise technologies. You will modernize endpoint management, drive GitOps and IaC workflows, automate lifecycle security, govern AI and MCP security, assess third-party and AI risk, partner on detection and response, and iterate and improve security controls and applications. You should have strong hands-on experience with Terraform and GitOps practices, experience in configuring security controls for cloud identity providers, and a practical, security-focused approach to problem-solving.

• Assurer des environnements sécurisés par défaut en sécurisant toutes les technologies d'entreprise, y compris les applications SaaS, les points de terminaison d'entreprise, les réseaux de bureau et les outils d'intelligence d'affaires.
• Moderniser la gestion des points de terminaison en améliorant la manière dont l'entreprise gère les appareils macOS, iOS, Windows et Linux, en renforçant l'architecture de sécurité des points de terminaison et en améliorant l'automatisation.
• Gérer les configurations de sécurité des points de terminaison et des SaaS à l'aide de Terraform, de la gestion de version, des demandes de fusion, des pipelines d'intégration continue et des déploiements automatisés.

• We recognize that the most innovative teams are built from diverse backgrounds and unique skill sets, which is why we don't expect any single candidate to check every box. You do not need to meet 100% of these qualifications to apply
• Infrastructure-as-Code Expert: Strong hands-on ability with Terraform and GitOps practices, including module design, state management, code reviews, and pipeline-based deployments
• SaaS & Identity Practitioner: Experienced in configuring security controls for cloud identity providers (Okta, Google Workspace, LDAP), SSOs, Data Loss Prevention, and Firewalls. You have specific experience managing Okta tool usage and MCPs
• Empathetic & Accountable: You bring a practical, security-focused approach to problem solving, building customer trust while helping to improve the overall security program
• Threat Modeler: You enjoy collaborating on threat modeling exercises and are driven to solve new challenges as Compass’s architecture rapidly evolves
• Automation-First Engineer: You have strong proficiency in scripting or programming (Python or Go) and leverage automation to solve the challenges of scale
• Security Leader: Comfortable teaching and guiding development teams toward better security outcomes. You are open to bringing transferable experience from adjacent security, systems, or platform engineering backgrounds
• Clear Communicator: Able to articulate security vulnerabilities, remediation techniques, and technical protocol functions (SAML, SCIM, OAuth, OIDC, SMTP, DNS) in an accessible way across a distributed, all-remote workforce
• Endpoint & Systems Specialist: Deep knowledge of endpoint management platforms (such as Jamf Pro, FleetDM, MDM, or EDR), particularly in architecting and securing macOS environments at scale