Staff Security Engineer, AI

About the role

ABOUT COMPA

Compa is a venture-backed AI startup revolutionizing the future of compensation! We're bringing AI-forward tools and human-centered engineering to make pay competitive and fair, for all. By offering a premier, live compensation data platform that delivers top-tier intelligence to enterprise teams, we enable the world's largest companies to make smart and fair decisions while staying competitive and compliant. In dynamic job markets during the rise of AI, companies need the best data to stay competitive!

Our force-multiplying team is powered by live data and thoughtful design, and our products have earned the trust of the world’s largest companies: NVIDIA, Stripe, DoorDash, OpenAI, Moderna, Workday, Ulta, Target, and more.

Come build with us!

THE ROLE

Compa is an AI-first company, and we hold our own AI adoption to the same security bar our enterprise customers hold us to. Teams across Compa are putting agents and AI tools to work, and doing that securely at enterprise scale is frontier work: the industry playbook is still being written, and we're looking for a Staff Security Engineer who wants to help write it.

As a senior member of Compa's Security team reporting directly to the Head of Security and IT, you’ll build the systems that deliver secure, governed AI to the business: the identity, access, data, endpoint, and network foundation that lets people and agents work safely. Most of your near- and mid-term work is building that foundation. Because it's built from enterprise security primitives, that same work also strengthens and extends our broader security program.

You're a security engineer first. You reason about threats, identity, and trust boundaries before tools, hold a high bar for security and privacy, and measure success by what ships. You're also an enabler: you obsess over getting every piece to line up so that what's secure is also what's easiest to use. Strong pushback is expected where it's warranted; the usual answer is "yes, here's how": a secure path to the outcome, not the request at face value.

WHAT YOU'LL DO

- Build the secure foundation for AI at Compa. Design and implement the architecture AI tools and agents run on, across identity, data, endpoint, SaaS, and network, as reusable infrastructure. Codify it in policy, standards, and reference architectures so new tools land on a paved road, not a one-off review.

- Make secure adoption the fast path. Help every team get on approved AI tools quickly.

- Own requests end to end. Turn ambiguous asks into clear requirements, then design, implement, and support the solution in production, partnering with IT, engineering, legal, privacy, and business leaders along the way.

- Secure non-human identities and agent access. Define how agents, service accounts, and integrations authenticate and what they can do, with scoped credentials, OAuth scope governance, least privilege, and human-in-the-loop checkpoints for consequential actions.