{"id":2012022,"url":"https://alion.io/job/compass-staff-security-engineer-product-security-and-architecture","title":"Staff Security Engineer (Product Security And Architecture)","company":{"id":58510,"name":"Compass","domain":"compass.com","url":"https://alion.io/company/compass","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":{"grade":"B","score":75,"open_postings":8,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Boston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":210000,"max":234100,"currency":"USD","period":"year","gross":null,"usd_annual":234100},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-07-30T00:09:07Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-23T01:17:15Z","board_verified":true,"closed_at":null,"days_open":85,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":85},"description":"Join our Security organization as a Staff Security Engineer, where you will play a crucial role in protecting one of the largest and most complex real estate technology estates in the industry. You will be responsible for automating and scaling application security, driving secure-by-design architectures, serving as a trusted security advisor, evangelizing product security, cultivating collaboration, and driving the adoption of AI-powered security capabilities. You will also stay ahead of industry trends and continuously innovate to ensure our security capabilities keep pace with evolving business and engineering objectives.\nMissions\nAutomate and scale application security by building and enhancing automated testing frameworks.\nDrive secure-by-design architectures by partnering with engineering teams to evaluate solution architectures.\nServe as a trusted security advisor by offering security guidance and risk evaluations for new product features.\nProfil recherché\n - Analytical Problem Solver: You possess exceptional troubleshooting skills and the logical capacity to diagnose complex architectural and pipeline security challenges- Self-Driven Achiever: You are highly self-motivated, with the organizational and time-management skills required to manage multiple complex initiatives simultaneously\n- Strategic Collaborator: You thrive in Agile and DevOps environments, viewing security as an enabler of engineering velocity rather than a bottleneck\n- Technical Leader & Advocate: You are passionate about mentoring others and can articulately champion security concepts to both deeply technical engineers and business stakeholders\n- Performing security code reviews for solutions built in Python, JavaScript, TypeScript, Golang, or Java\n- Bachelor’s degree in Computer Science, a related technical field, or equivalent practical work experience\n- Practical experience working with AWS services, aligning both product solution delivery and security objectives\n- Hands-on experience using Artificial Intelligence (AI) to assist with product security processes to drive team and operational efficiencies\n- Minimum of three (3) years of experience across the following areas:\n- Hands-on experience with Infrastructure as Code (IaC) tools (e.g., Terraform) to provision secure, reproducible infrastructure\n- Administering and tuning application security testing tools (e.g., SAST, DAST, or SCA)\n- Product development using Python, JavaScript, TypeScript, Golang, or Java\n- Administering and configuring automated pipeline tools (CI/CD)\n- Automation scripting using Python or Bash\n- Participating in security-focused reviews for both vendor and custom business solutions\n- Relevant industry certifications (e.g., CEH, CISSP, CSSLP, GIAC, or cloud security certifications) are a strong plus\n- Direct experience working within high-performing DevOps and Agile cultures\n- Experience with Layer 7 security controls (e.g., Web Application Firewalls (WAF), API Gateways, OAuth2/OIDC implementation, and rate limiting)\n- Experience driving secure-by-design practices across multi-cloud strategies (e.g., AWS, Azure, GCP)\n- Experience reviewing and assessing the use of AI technologies within both vendor-provided and custom-developed business solutions\n- Experience operating in a publicly traded company, including familiarity with SOX-adjacent control environments and audit processes\n- Experience securing environments through a merger, acquisition, or major infrastructure consolidation","description_format":"text","description_chars":3494,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-07T13:04:41Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4 · green card filings: 1","filings_12m":4,"filings_prev_12m":2,"green_card_filings_12m":1,"median_offered_wage_usd":80500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.67,"p_room":0.28,"age_days":84,"expected_fill_days":28,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":234100,"is_top_pay":true},"html_url":"https://alion.io/job/compass-staff-security-engineer-product-security-and-architecture","json_url":"https://alion.io/job/compass-staff-security-engineer-product-security-and-architecture.json","meta":{"generated_at":"2026-10-23T04:59:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8204,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58510},"rest":"https://alion.io/mcp/rest/get_company?id=58510"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcompass-staff-security-engineer-product-security-and-architecture"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcompass-staff-security-engineer-product-security-and-architecture"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcompass-staff-security-engineer-product-security-and-architecture"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/compass-staff-security-engineer-product-security-and-architecture\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcompass-staff-security-engineer-product-security-and-architecture"}]}