DIRECTOR OF SECURITY ENGINEERING (REMOTE, GA, US, REMOTE)

Salary : $180,000-$200,000 + bonus eligible

Compass Technology is a dedicated internal team for Compass Group delivering enterprise-wide initiatives that support our diverse customer base and enhance our business operations. Our domain encompasses a vast spectrum of opportunities, from hands-on desk support to Cybersecurity, Cloud Engineering, AI, and Modern Application development. We are committed to building robust IT infrastructures, driving digital transformation, and much more.

Job Summary

Reporting to the Sr. Director of Cybersecurity within Compass Group North America, the Director of Security Engineering owns the strategy, leadership, and execution of Compass Group’s security engineering functions across cloud security, infrastructure security, and detection engineering. Leading a multi-team organization, the Director sets the technical roadmap for security controls across cloud environments and the security tooling and infrastructure underpinning our security operations.

The role owns the health and effectiveness of our security tooling, the detection engineering function that turns telemetry into high-fidelity, actionable signals, and the cloud security capabilities that deploy and maintain controls across our multi-cloud footprint. It is highly collaborative, partnering closely with the Incident Management, Identity Management, Exposure Management, Security Architecture, and Security Administration teams within the CISO Office, and with technology teams across Compass Group North America.

Job Responsibilities

- Lead the Security Engineering organization (Cloud Security, Infrastructure Security, and Detection Engineering) through managers and individual contributors, setting organizational, team, and individual goals aligned to security objectives.

- Recruit, develop, and retain technical talent: build clear career paths, mentor managers and engineers, and conduct performance appraisals.

- Own the multi-year security engineering roadmap, shaping capabilities, methods, and investment priorities.

- Own the security vendor portfolio: tool consolidation and rationalization, procurement, renewals, licensing and budget alignment, support escalations, roadmap influence, and quarterly business reviews. Hold vendors and tools accountable to measurable outcomes and manage tool lifecycle end to end.

- Partner across IT, infrastructure, application, and sector technology teams to advance security engineering projects, and lead or support initiatives sponsored by security, technology, and business teams.

- Present posture and metrics to the CISO Office and senior technology leadership; serve as executive-level subject matter expert on security engineering, cloud-native controls, and defensive engineering.

- Direct the design, deployment, and operation of security visibility and control mechanisms across AWS, GCP, and Azure, including validating adherence through regular monitoring and audits.

- Own the technical direction and operational health, availability, coverage, performance, and patch management of the endpoint, network security, and vulnerability management platform stack.

- Own SIEM, SOAR, and security telemetry platform strategy: log source prioritization, ingestion optimization and filtering, consumption management, and platform health and efficiency.

- Mature detection engineering as a discipline: use cases mapped to recognized adversary frameworks such as MITRE ATT&CK, detection-as-code with version control and testing, tuning, and coverage measurement.

- Drive event prioritization and cross-tool correlation to reduce false positives, in collaboration with the Incident Management team.

- Direct and advance automation development supporting incident management and other security capabilities, and ensure the health, optimization, and intended results of workflows.

- Remain available for escalation during significant security incidents and major security platform disruptions.

Job Qualifications