Senior Security Engineer at Crexi

Job description

About Crexi Commercial real estate is one of the largest asset classes on earth and one of the last to go digital. Deals still get done over email threads, PDFs, and relationships nobody can search for. Crexi is the exchange betting that doesn't have to be true anymore: we're building the platform where an entire industry finds, evaluates, and closes deals, and we're betting hard on AI to get there faster than anyone thought this industry could move. There's no playbook for turning a trillion-dollar, relationship-driven industry into a modern marketplace which means the people building it get to write it. About the Role: The Senior Security Engineer design s , implement s , and maintain s security controls across Crexi's systems. This role serves as a subject matter expert on security tooling and practices, leads remediation of complex vulnerabilities, and shares expertise with less experienced engineers. The Senior Security Engineer partners with engineering and IT to embed security into the full software lifecycle. What You'll Do: Independently designs and implements security controls and tooling across cloud (AWS) and on-prem environments. Leads execution of the vulnerability management program, prioritizing and driving remediation across teams. Serves as subject matter expert on SIEM, SAST/DAST tooling, and IAM practices. Partners with engineering teams to embed security requirements into the software development lifecycle. Leads investigation and response for security incidents, including root cause analysis. Mentors less experienced engineers on security tooling and best practices. Supports audit readiness, gathering and organizing evidence for SOC 2 and ISO 27001. Identifies gaps in existing controls and recommends improvements. Qualifications: Required: Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience. Required: 5+ years of security engineering experience. Preferred: Experience with SaaS or marketplace platforms. Who You Are: Thrives in a fast-paced, dynamic environment. Exceptional communication skills, with the ability to provide clear and concise information to stakeholders at all levels. Strong analytical skills, with the ability to interpret complex information and identify patterns. Excellent organizational and prioritization skills, with the ability to manage multiple priorities and deadlines. Self-starter who independently owns their own success and demonstrates strong initiative. Responsive, action-oriented, and proactive in identifying and resolving issues. Strong problem-solving and creative thinking skills, with the ability to evaluate options and implement effective solutions. Effective collaborator, with the ability to work cross-functionally and build strong working relationships. Demonstrated ability to handle sensitive and confidential information with the utmost professionalism and discretion. Command of security tooling and domains such as SIEM, SAST/DAST, cloud security (AWS), IAM, vulnerability management, and compliance frameworks (e.g., SOC 2, ISO 27001). Strong security engineering background with experience delivering in a SaaS environment. Working knowledge of agile delivery practices. Why Crexi? Real impact, fast. Join a rapidly scaling startup where your work moves the needle from day one. Real ownership. Equity in Crexi's growth story. Built for growth. A flexible team structure designed for real career discretion. Time that is yours. Discretionary PTO - take what you need, when you need it. Health & Future covered. Medical, dental, and vision insurance, 401(k), FSA/HSA options, and Life & AD&D insurance. Set up right. Home-office reimbursement for remote employees. A winning team. A collaborative culture with team activities that bring people together. The anticipated base salary range for candidates who will work in our Playa Vista, California location is $167,000 to $227,000. The final salary offered to a successful candidate will depend on several factors, which may include, but are not limited to, the type and length of experience applicable to the role and within the industry, education, geographic location, etc. Commercial Real Estate Exchange, Inc (“Crexi”) is a multi-state employer, and this salary range may not reflect positions that work in other states. Crexi is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Crexi will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Requirements

Must-haves

Independently designs and implements security controls and tooling across cloud (AWS) and on-prem environments.
Leads execution of the vulnerability management program, prioritizing and driving remediation across teams.
Serves as subject matter expert on SIEM, SAST/DAST tooling, and IAM practices.
Partners with engineering teams to embed security requirements into the software development lifecycle.
Leads investigation and response for security incidents, including root cause analysis.
Mentors less experienced engineers on security tooling and best practices.
Supports audit readiness, gathering and organizing evidence for SOC 2 and ISO 27001.
Identifies gaps in existing controls and recommends improvements.
Required: Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
Required: 5+ years of security engineering experience.
Thrives in a fast-paced, dynamic environment.
Exceptional communication skills, with the ability to provide clear and concise information to stakeholders at all levels.
Strong analytical skills, with the ability to interpret complex information and identify patterns.
Excellent organizational and prioritization skills, with the ability to manage multiple priorities and deadlines.
Self-starter who independently owns their own success and demonstrates strong initiative.
Responsive, action-oriented, and proactive in identifying and resolving issues.
Strong problem-solving and creative thinking skills, with the ability to evaluate options and implement effective solutions.
Effective collaborator, with the ability to work cross-functionally and build strong working relationships.
Demonstrated ability to handle sensitive and confidential information with the utmost professionalism and discretion.
Command of security tooling and domains such as SIEM, SAST/DAST, cloud security (AWS), IAM, vulnerability management, and compliance frameworks (e.g., SOC 2, ISO 27001).
Strong security engineering background with experience delivering in a SaaS environment.
Working knowledge of agile delivery practices.
Real impact, fast. Join a rapidly scaling startup where your work moves the needle from day one.

Nice-to-haves

Preferred: Experience with SaaS or marketplace platforms.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

goaiawsagile

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto