{"id":3283117,"url":"https://alion.io/job/compa-saas-customer-agreement-between-compa-technologies-inc-staff-security-engineer-ai","title":"Staff Security Engineer, AI","company":{"id":2075304,"name":"Compa SaaS Customer Agreement between Compa Technologies, Inc.","domain":"compa.ai","url":"https://alion.io/company/compa-ai","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Irvine, United States","Seattle, United States","Denver, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":202500,"max":275000,"currency":"USD","period":"year","gross":null,"usd_annual":275000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"Function Calling","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OpenAI","optional":false},{"name":"OWASP Top 10","optional":false}],"status":"live","first_seen_at":"2026-10-26T15:50:51Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-28T11:00:15Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About Compa\nCompa is a venture-backed AI startup revolutionizing the future of compensation! We're bringing AI-forward tools and human-centered engineering to make pay competitive and fair, for all. By offering a premier, live compensation data platform that delivers top-tier intelligence to enterprise teams, we enable the world's largest companies to make smart and fair decisions while staying competitive and compliant. In dynamic job markets during the rise of AI, companies need the best data to stay competitive!\nOur force-multiplying team is powered by live data and thoughtful design, and our products have earned the trust of the world’s largest companies: NVIDIA, Stripe, DoorDash, OpenAI, Moderna, Workday, Ulta, Target, and more.\nCome build with us!\nThe Role\nCompa is an AI-first company, and we hold our own AI adoption to the same security bar our enterprise customers hold us to. Teams across Compa are putting agents and AI tools to work, and doing that securely at enterprise scale is frontier work: the industry playbook is still being written, and we're looking for a Staff Security Engineer who wants to help write it.\nAs a senior member of Compa's Security team reporting directly to the Head of Security and IT, you’ll build the systems that deliver secure, governed AI to the business: the identity, access, data, endpoint, and network foundation that lets people and agents work safely. Most of your near- and mid-term work is building that foundation. Because it's built from enterprise security primitives, that same work also strengthens and extends our broader security program.\nYou're a security engineer first. You reason about threats, identity, and trust boundaries before tools, hold a high bar for security and privacy, and measure success by what ships. You're also an enabler: you obsess over getting every piece to line up so that what's secure is also what's easiest to use. Strong pushback is expected where it's warranted; the usual answer is \"yes, here's how\": a secure path to the outcome, not the request at face value.\nWhat You'll Do\nBuild the secure foundation for AI at Compa. Design and implement the architecture AI tools and agents run on, across identity, data, endpoint, SaaS, and network, as reusable infrastructure. Codify it in policy, standards, and reference architectures so new tools land on a paved road, not a one-off review.\n\nMake secure adoption the fast path. Help every team get on approved AI tools quickly.\n\nOwn requests end to end. Turn ambiguous asks into clear requirements, then design, implement, and support the solution in production, partnering with IT, engineering, legal, privacy, and business leaders along the way.\n\nSecure non-human identities and agent access. Define how agents, service accounts, and integrations authenticate and what they can do, with scoped credentials, OAuth scope governance, least privilege, and human-in-the-loop checkpoints for consequential actions.\n\nControl the paths data takes. Govern how internal data reaches models and agents and how it leaves, through classification, permission-aware retrieval, AI gateways with DLP, MCP and tool allowlisting, and egress controls. Assess third-party models and AI vendors for security, data retention, and training-use terms.\n\nEvaluate with an attacker's mindset. Map attack paths for new models, agents, and integrations, from prompt injection and unsafe tool use to OAuth abuse and data exfiltration. Decide deliberately where to add friction or say no, and document the residual risk.\n\nBuild for detection and response. Make sure what you build produces audit logs of prompts, tool calls, and agent actions, plus detections for anomalous tool use and unexpected data movement. Automate enforcement so secure configurations scale with the business and stay the default.\n\nRaise Compa's security posture across the board. Contribute to multidisciplinary security initiatives across identity, endpoint, SaaS, cloud, network, detection, and incident response.\n\nWhat We're Looking For\nSignificant hands-on security engineering experience with strong fundamentals and a security and privacy-first approach.\n\nExperience designing, building, or securing AI systems or integrations, such as agents and tool use, retrieval over internal data, or MCP, and a working understanding of how they're attacked, including prompt injection, data leakage, and excessive agency.\n\nDeep experience with identity and access architecture: SSO and federation (SAML, OIDC), conditional access and MFA, privileged access, identity lifecycle, non-human identities, and OAuth consent and scopes.\n\nHands-on experience securing endpoints and SaaS, including device management across major operating systems, device posture in access decisions, SaaS admin controls, third-party integrations, and audit logging.\n\nStrong cloud and network security fundamentals, such as cloud IAM, segmentation, and egress control.\n\nA working understanding of adversary TTPs and attack paths across identity, endpoint, cloud, and SaaS.\n\nA builder's habits: you make the secure way the default instead of asking people to follow instructions. You'd push an MDM policy rather than send a how-to, reach for code to automate what repeats, and keep things like configurations and agent skills versioned in a repo.\n\nDemonstrated staff-level judgment: reasoning from requirements to architecture before tools, turning novel problems into concrete plans, and explaining trade-offs and residual risk effectively to technical and non-technical audiences across levels.\n\nAs a Plus\nHands-on experience deploying AI security controls such as MCP gateways, LLM proxies, or sandboxed agent execution.\n\nA background in threat hunting, incident response, detection engineering, or offensive or purple team work.\n\nFamiliarity with AI risk frameworks such as the OWASP Top 10 for LLM Applications, MITRE ATLAS, or NIST AI RMF.\n\nExperience in regulated or high-trust environments, or with privacy and data protection programs.\n\nExperience building enterprise security architecture at a growing company.\n\nCompa offers a competitive and comprehensive benefits package including medical, dental, vision, PTO and parental leave, equity, company offsites, continuous education, commuter benefits and a flexible work environment.","description_format":"text","description_chars":6303,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Agents","Business Process Outsourcing (BPO)"],"lifecycle":[{"event":"open","at":"2026-10-26T17:25:46Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:4","win:early"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":275000,"is_top_pay":true},"html_url":"https://alion.io/job/compa-saas-customer-agreement-between-compa-technologies-inc-staff-security-engineer-ai","json_url":"https://alion.io/job/compa-saas-customer-agreement-between-compa-technologies-inc-staff-security-engineer-ai.json","meta":{"generated_at":"2026-10-28T13:56:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18925,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2075304},"rest":"https://alion.io/mcp/rest/get_company?id=2075304"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcompa-saas-customer-agreement-between-compa-technologies-inc-staff-security-engineer-ai"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcompa-saas-customer-agreement-between-compa-technologies-inc-staff-security-engineer-ai"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcompa-saas-customer-agreement-between-compa-technologies-inc-staff-security-engineer-ai"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/compa-saas-customer-agreement-between-compa-technologies-inc-staff-security-engineer-ai\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcompa-saas-customer-agreement-between-compa-technologies-inc-staff-security-engineer-ai"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3283117}},{"tool":"search_jobs","arguments":{"company":"compa.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3283117},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}