Senior Security Engineer

About the Role

The Senior Security Engineer designs, implements, and maintains security controls across Crexi's systems. This role serves as a subject matter expert on security tooling and practices, leads remediation of complex vulnerabilities, and shares expertise with less experienced engineers. The Senior Security Engineer partners with engineering and IT to embed security into the full software lifecycle.

What You'll Do

• Independently designs and implements security controls and tooling across cloud (AWS) and on-prem environments.
• Leads execution of the vulnerability management program, prioritizing and driving remediation across teams.
• Serves as subject matter expert on SIEM, SAST/DAST tooling, and IAM practices.
• Partners with engineering teams to embed security requirements into the software development lifecycle.
• Leads investigation and response for security incidents, including root cause analysis.
• Mentors less experienced engineers on security tooling and best practices.
• Supports audit readiness, gathering and organizing evidence for SOC 2 and ISO 27001.
• Identifies gaps in existing controls and recommends improvements.

Qualifications

• Required: Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Required: 5+ years of security engineering experience.
• Preferred: Experience with SaaS or marketplace platforms.

Who You Are

• Thrives in a fast-paced, dynamic environment.
• Exceptional communication skills, with the ability to provide clear and concise information to stakeholders at all levels.
• Strong analytical skills, with the ability to interpret complex information and identify patterns.
• Excellent organizational and prioritization skills, with the ability to manage multiple priorities and deadlines.
• Self-starter who independently owns their own success and demonstrates strong initiative.
• Responsive, action-oriented, and proactive in identifying and resolving issues.
• Strong problem-solving and creative thinking skills, with the ability to evaluate options and implement effective solutions.
• Effective collaborator, with the ability to work cross-functionally and build strong working relationships.
• Demonstrated ability to handle sensitive and confidential information with the utmost professionalism and discretion.
• Command of security tooling and domains such as SIEM, SAST/DAST, cloud security (AWS), IAM, vulnerability management, and compliance frameworks (e.g., SOC 2, ISO 27001).
• Strong security engineering background with experience delivering in a SaaS environment.
• Working knowledge of agile delivery practices.