Lead Security Engineer
CoStar GroupVirginia, United States
Posted January 20, 2026
Full Time
About the Company
CoStar Group (NASDAQ: CSGP) is a global leader in commercial real estate information, analytics, online marketplaces and 3D digital twin technology. Founded in 1986, CoStar Group is dedicated to digitizing the world’s real estate, empowering all people to discover properties, insights, and connections that improve their businesses and lives. CoStar Group’s major brands include CoStar, a leading global provider of commercial real estate data, analytics, and news; LoopNet, the most trafficked commercial real estate marketplace; Apartments.com, the leading platform for apartment rentals; and Homes.com, the fastest-growing residential real estate marketplace. CoStar Group’s industry-leading brands also include Matterport, a leading spatial data company whose platform turns buildings into data to make every space more valuable and accessible, STR, a global leader in hospitality data and benchmarking, Ten-X, an online platform for commercial real estate auctions and negotiated bids and OnTheMarket, a leading residential property portal in the United Kingdom. CoStar Group’s websites attracted over 134 million average monthly unique visitors in the fourth quarter of 2024, serving clients around the world. Headquartered in Arlington, Virginia, CoStar Group is committed to transforming the real estate industry through innovative technology and comprehensive market intelligence. From time to time, we plan to utilize our corporate website as a channel of distribution for material company information. For more information, visit CoStarGroup.com.
Job Description
CoStar Group is seeking a Lead Security Engineer to oversee incident response activities, lead technical security assessments, and facilitate quarterly incident response tabletop exercises. The successful candidate will have experience implementing standard security software, using scripting languages, and familiarity with CI/CD practices. This is a full-time position that can be located in Arlington or Richmond, VA, with a flexible work arrangement of in-office work Monday through Thursday and remote work on Friday.
Requirements
- Lead incident response activities
- Lead technical security assessments
- Facilitate quarterly incident response tabletop exercises
- Develop platform automations to increase efficiency in responding to observed threats
- Coordinate, performance and derive work from the security review and monitoring of the production environment setup permissions of users, open ports/services and overall network setup
- Examine network, server, and application logs with forensic depth to determine trends and identify security incidents
- Use security tools to audit infrastructure, detect issues and coordinate remediation of any issues
- Develop and mature threat hunting practices in the CoStar enterprise
- Collaborate with other teams to remediate discovered deficiencies, and develop and improve network and endpoint security configuration procedures
- Participate in 24x7 on-call rotation
Benefits
- Comprehensive healthcare coverage
- Life, legal, and supplementary insurance
- Virtual and in person mental health counseling services for individuals and family
- Commuter and parking benefits
- 401(K) retirement plan with matching contributions
- Employee stock purchase plan
- Paid time off
- Tuition reimbursement
- On-site fitness center and/or reimbursed fitness center membership costs (location dependent)
- Access to CoStar Group’s Diversity, Equity, & Inclusion Employee Resource Groups
- Complimentary gourmet coffee, tea, hot chocolate, fresh fruit, and other healthy snacks