Senior Security Engineer
Want this job? Aria tailors your résumé to this role and submits the application on the employer's own platform — on your behalf. Free to start.
About this role
About Crexi
Crexi is reimagining commercial real estate with an AI-powered platform built to deliver smarter, more efficient solutions at every stage of the deal lifecycle. From real-time data and market insights generated by Crexi Intelligence, to targeted property marketing and seamless deal management through Crexi PRO, and a transparent, time-bound bidding experience with Crexi Auction— Crexi enables users to evaluate opportunities, maximize exposure, and close with speed and confidence. To date, Crexi has facilitated over $1 trillion in transactions, 8.6 billion square feet leased, and supports a growing community of more than 2 million monthly active users.
Crexi’s mission is to catalyze the next generation of commercial real estate through three core pillars: Access, Innovation, and Connection. Crexi’s platform democratizes CRE by providing unprecedented access to market insights and opportunities, accelerates CRE dealmaking with purpose-built technology that enhances speed and transparency; and empowers CRE professionals with a centralized platform designed for real-time collaboration and success.
About the Role:
The Senior Security Engineer designs, implements, and maintains security controls across Crexi's systems. This role serves as a subject matter expert on security tooling and practices, leads remediation of complex vulnerabilities, and shares expertise with less experienced engineers. The Senior Security Engineer partners with engineering and IT to embed security into the full software lifecycle.
What You'll Do:
• Independently designs and implements security controls and tooling across cloud (AWS) and on-prem environments.
• Leads execution of the vulnerability management program, prioritizing and driving remediation across teams.
• Serves as subject matter expert on SIEM, SAST/DAST tooling, and IAM practices.
• Partners with engineering teams to embed security requirements into the software development lifecycle.
• Leads investigation and response for security incidents, including root cause analysis.
• Mentors less experienced engineers on security tooling and best practices.
• Supports audit readiness, gathering and organizing evidence for SOC 2 and ISO 27001.
• Identifies gaps in existing controls and recommends improvements.
<span data-ccp-props="{"335
Stop filling out applications one by one.