Senior Security Engineer — Cloud Security & Compliance

Crexi; Vista (CA); On-site; USD 167,000 - 227,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Job summary

Crexi, a California-based commercial real estate tech company, seeks a Senior Security Engineer to design, implement, and maintain security controls across Crexi's systems. You will serve as a security SME, lead remediation of complex vulnerabilities, and collaborate with engineering and IT to embed security throughout the software lifecycle.

You will own the vulnerability management program, oversee SIEM, SAST/DAST tooling, IAM practices, mentor teammates, and support audit readiness for SOC 2

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field, or equivalent practical experience.
• 5+ years of security engineering experience.
• Preferred: Experience with SaaS or marketplace platforms.

Responsibilities

• Designs and implements security controls across cloud (AWS) and on-prem environments.
• Leads vulnerability management remediation across teams.
• Serves as SME on SIEM, SAST/DAST tooling, and IAM practices.
• Partners with engineering to embed security into the software development lifecycle.
• Leads investigation and response for security incidents, including root cause analysis.
• Mentors less experienced engineers on security tooling and best practices.
• Supports audit readiness, gathering evidence for SOC 2 and ISO 27001.
• Identifies gaps in existing controls and recommends improvements.

Skills

Security engineering

Cloud security (AWS)

Vulnerability management

SIEM

IAM

SAST/DAST

SaaS platforms

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

SIEM tooling

SAST/DAST tooling

IAM tooling

Job description

Crexi, a California-based commercial real estate tech company, seeks a Senior Security Engineer to design, implement, and maintain security controls across Crexi's systems. You will serve as a security SME, lead remediation of complex vulnerabilities, and collaborate with engineering and IT to embed security throughout the software lifecycle.

You will own the vulnerability management program, oversee SIEM, SAST/DAST tooling, IAM practices, mentor teammates, and support audit readiness for SOC 2