Senior Security Engineer

Crexi is building a digital marketplace for the commercial real estate industry, using technology and AI to modernize how deals are found, evaluated, and closed. The Senior Security Engineer designs and maintains security controls across cloud and on-premises environments, leads vulnerability remediation and incident response, and partners with engineering and IT to integrate security throughout the software development lifecycle.

Responsibilities:

• Independently designs and implements security controls and tooling across cloud (AWS) and on-prem environments
• Leads execution of the vulnerability management program, prioritizing and driving remediation across teams
• Serves as subject matter expert on SIEM, SAST/DAST tooling, and IAM practices
• Partners with engineering teams to embed security requirements into the software development lifecycle
• Leads investigation and response for security incidents, including root cause analysis
• Mentors less experienced engineers on security tooling and best practices
• Supports audit readiness, gathering and organizing evidence for SOC 2 and ISO 27001
• Identifies gaps in existing controls and recommends improvements

Requirements:

• Required: Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience
• Required: 5+ years of security engineering experience
• Thrives in a fast-paced, dynamic environment
• Exceptional communication skills, with the ability to provide clear and concise information to stakeholders at all levels
• Strong analytical skills, with the ability to interpret complex information and identify patterns
• Excellent organizational and prioritization skills, with the ability to manage multiple priorities and deadlines
• Self-starter who independently owns their own success and demonstrates strong initiative
• Responsive, action-oriented, and proactive in identifying and resolving issues
• Strong problem-solving and creative thinking skills, with the ability to evaluate options and implement effective solutions
• Effective collaborator, with the ability to work cross-functionally and build strong working relationships
• Demonstrated ability to handle sensitive and confidential information with the utmost professionalism and discretion
• Command of security tooling and domains such as SIEM, SAST/DAST, cloud security (AWS), IAM, vulnerability management, and compliance frameworks (e.g., SOC 2, ISO 27001)
• Strong security engineering background with experience delivering in a SaaS environment
• Working knowledge of agile delivery practices
• Preferred: Experience with SaaS or marketplace platforms