Senior Security Engineer

About the Role:

The Senior Security Engineer designs, implements, and maintains security controls across Crexi's systems. This role serves as a subject matter expert on security tooling and practices, leads remediation of complex vulnerabilities, and shares expertise with less experienced engineers. The Senior Security Engineer partners with engineering and IT to embed security into the full software lifecycle. 

What You'll Do:

• Independently designs and implements security controls and tooling across cloud (AWS) and on-prem environments. 
• Leads execution of the vulnerability management program, prioritizing and driving remediation across teams. 
• Serves as subject matter expert on SIEM, SAST/DAST tooling, and IAM practices. 
• Partners with engineering teams to embed security requirements into the software development lifecycle. 
• Leads investigation and response for security incidents, including root cause analysis. 
• Mentors less experienced engineers on security tooling and best practices. 
• Supports audit readiness, gathering and organizing evidence for SOC 2 and ISO 27001. 
• Identifies gaps in existing controls and recommends improvements. 

Qualifications:

• Required: Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience. 
• Required: 5+ years of security engineering experience. 
• Preferred: Experience with SaaS or marketplace platforms. 

Who You Are:

• Thrives in a fast-paced, dynamic environment. 
• Exceptional communication skills, with the ability to provide clear and concise information to stakeholders at all levels. 
• Strong analytical skills, with the ability to interpret complex information and identify patterns. 
• Excellent organizational and prioritization skills, with the ability to manage multiple priorities and deadlines. 
• Self-starter who independently owns their own success and demonstrates strong initiative. 
• Responsive, action-oriented, and proactive in identifying and resolving issues. 
• Strong problem-solving and creative thinking skills, with the ability to evaluate options and implement effective solutions. 
• Effective collaborator, with the ability to work cross-functionally and build strong working relationships. 
• Demonstrated ability to handle sensitive and confidential information with the utmost professionalism and discretion. 
• Command of security tooling and domains such as SIEM, SAST/DAST, cloud security (AWS), IAM, vulnerability management, and compliance frameworks (e.g., SOC 2, ISO 27001). 
• Strong security engineering background with experience delivering in a SaaS environment. 
• Working knowledge of agile delivery practices. 

Why Crexi?

• Real impact, fast. Join a rapidly scaling startup where your work moves the needle from day one.
• Real ownership. Equity in Crexi's growth story.
• Built for growth. A flexible team structure designed for real career discretion.
• Time that is yours. Discretionary PTO - take what you need, when you need it.
• Health & Future covered. Medical, dental, and vision insurance, 401(k), FSA/HSA options, and Life & AD&D insurance.
• Set up right. Home-office reimbursement for remote employees.
• A winning team. A collaborative culture with team activities that bring people together.

The anticipated base salary range for candidates who will work in our Playa Vista, California location is $167,000 to $227,000. The final salary offered to a successful candidate will depend on several factors, which may include, but are not limited to, the type and length of experience applicable to the role and within the industry, education, geographic location, etc. Commercial Real Estate Exchange, Inc ("Crexi") is a multi-state employer, and this salary range may not reflect positions that work in other states.