Senior Security Engineer — Cloud & Incident Response Lead

Crexi; Los Angeles (CA); On-site; USD 167,000 - 227,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Team activities

Job summary

Crexi seeks a Senior Security Engineer to design, implement, and maintain security controls across our cloud (AWS) and on‑prem environments. You’ll lead the vulnerability management program, act as SME on SIEM, SAST/DAST, and IAM practices, and mentor junior engineers while embedding security into the full software lifecycle.

You’ll collaborate with engineering to drive secure SDLC, contribute to audit readiness for SOC 2 and ISO 27001, and help identify and fix gaps in existing controls.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field, or equivalent practical experience.
• 5+ years of security engineering experience.
• Preferred: Experience with SaaS or marketplace platforms.

Responsibilities

• Design and implement security controls across cloud (AWS) and on-prem environments.
• Lead vulnerability management program and remediation efforts.
• Serve as SME on SIEM, SAST/DAST, and IAM practices.
• Embed security requirements in the SDLC with engineering teams.
• Mentor junior engineers on tooling and best practices.
• Support audit readiness for SOC 2 and ISO 27001.

Skills

Security engineering

SIEM

SAST/DAST

IAM

Cloud security (AWS)

Vulnerability management

Communication

Agile delivery

Education

Bachelor's degree in Computer Science or related field

Tools

AWS

SAST/DAST tooling

SOC 2 auditing tools

ISO 27001 auditing tools

Job description

Crexi seeks a Senior Security Engineer to design, implement, and maintain security controls across our cloud (AWS) and on‑prem environments. You’ll lead the vulnerability management program, act as SME on SIEM, SAST/DAST, and IAM practices, and mentor junior engineers while embedding security into the full software lifecycle.

You’ll collaborate with engineering to drive secure SDLC, contribute to audit readiness for SOC 2 and ISO 27001, and help identify and fix gaps in existing controls.