Security Engineer

Issa Compass is building the technology platform for global immigration. We help individuals and businesses navigate visa applications through a combination of software, automation, AI, and expert support.

We hold some of the most sensitive data a person has, including passports, financial records, immigration history, biometric documents, for thousands of people trying to build a new life in a new country. That's not a checkbox compliance problem. It's a trust problem, and trust is the entire product.

We're looking for someone to help us treat that responsibility like it deserves: securing how we store, move, and process applicant data as we scale across Thailand and beyond.

This is not a "watch the senior engineer for a year" role. You'll have real ownership over real systems handling real people's most sensitive documents from day one.

What You'll Own

• Harden how applicant data (passports, financial docs, biometrics) is stored, transmitted, and accessed across our stack
• Build and maintain access controls, audit logging, and monitoring so we always know who touched what, when, and why
• Use AI tools (Claude, Cursor, etc.) as your default way of working — to review code for vulnerabilities, draft detection logic, and move faster than a traditional security team could
• Partner with engineering on secure-by-default patterns as we ship new features, instead of bolting security on after the fact
• Support our PDPA compliance work (Thailand) with real technical implementation, not just documentation
• Take point on incident response readiness — the plan, the drills, and the calm head if something ever does go wrong

Who We're Looking For

Someone who

• Is genuinely fluent with AI tools and uses them daily to think faster, not as a novelty
• Has real grounding in security fundamentals (auth, encryption, common attack patterns, secure system design) — from coursework, CTFs, personal projects, or self-study; professional experience not required
• Takes data privacy personally, not procedurally — you understand that a leaked document isn't an incident report, it's someone's visa application, someone's ability to work, someone's family
• Is comfortable being the person who says "no, we need to fix this first" — and can back it up
• Wants outsized responsibility over a comfortable ramp-up

Why Join

• You'll be trusted with something that actually matters to real people's lives, not a vanity metric
• Direct access to founders on a day-to-day basis
• Real ownership of a domain most startups treat as an afterthought
• Build in the fastest-growing part of the world: Southeast Asia, where immigration, tech, and cross-border data are all colliding at once

Why Join Issa Compass?

• Work directly with the founders on one of the company’s most important growth functions.
• Own meaningful budgets and see the direct commercial impact of your work.
• Run campaigns across multiple countries, customer segments, and visa products.
• Help build the performance marketing function from the ground up.
• Join a fast-growing technology company working to make global mobility simpler and more accessible.

We welcome applications from both experienced security engineers and high-potential candidates who have strong technical fundamentals and the drive to take real ownership of sensitive data from day one.