> Markdown version of [/jobs/ext/1207073-senior-security-operations-analyst](https://www.wearedevelopers.com/jobs/ext/1207073-senior-security-operations-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Operations Analyst - **Company:** Commercial Real Estate Exchange, Inc. - **Location:** Los Angeles, CA, United States - **Experience:** Expert - **Salary:** $148,000.0 - $201,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, CompTIA Security+, Cyber Security, Identity and Access Management, Intrusion Detection and Prevention, Azure Active Directory, Phishing, Runbook, Security Information and Event Management, Software Vulnerability Management, Cloud Platform System, Information Technology, SAP MDG - **Published:** July 8, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=e9aae1dbe853a3da ## About the Role * Strong working knowledge of security operations concepts: threat detection, incident response, vulnerability management, and identity and access control. * Hands-on experience with EDR platforms (e.g., CrowdStrike), MDM tools, and SIEM or log management platforms. * Working knowledge of IAM principles and tools (e.g., Azure AD / Entra ID), including SSO, SCIM, and privileged access management. * Familiarity with SOC 2 trust service criteria and the practical evidence collection requirements for a corporate IT environment. * Strong written communication skills, able to produce clear incident reports, runbooks, and executive-facing security summaries. * Detail-oriented and organized, with the ability to manage multiple open incidents, tasks, and recurring compliance obligations simultaneously. * Collaborative approach to working with cross-functional stakeholders including IT, engineering, legal, and HR. * Self-starter who operates with a high degree of ownership and escalates appropriately when uncertainty or risk warrants it. * Familiarity with AI/ML-assisted security tooling and an understanding of how AI both augments defensive capabilities and introduces new risk vectors to the environment., * Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field preferred; equivalent professional experience considered. * 5-8 years of experience in a security operations, IT security, or similar hands-on role. * Hands-on experience supporting compliance frameworks, particularly SOC 2; familiarity with control evidence collection and audit preparation. * Security certifications preferred, e.g., CompTIA Security+, GCIA, GCIH, SSCP, or equivalent. * Experience working in cloud environments (AWS, Azure) with an understanding of cloud security fundamentals. * Experience with AI-powered security tools, SOAR platforms, or automated threat detection workflows is a plus. ## Description The Senior Security Operations Analyst is Crexi's primary internal security practitioner, responsible for day-to-day security operations, threat detection and response, and maintaining a strong security posture across the organization. Reporting to the Director, Information Technology, this role serves as the internal first line of defense for security events, protecting company systems, endpoints, identities, and data against evolving threats., * Monitor and triage security alerts, serve as the first internal escalation point for managed SOC vendors, investigate flagged incidents, and maintain accurate, timely incident logs. * Manage endpoint security tooling, administer EDR and MDM platforms, enforce policy compliance across employee devices, and remediate vulnerabilities identified through scans or alerts * Owns identity and access management (IAM) policy, access review design and audit reporting. * Run the phishing simulation and security awareness program, schedule and manage campaigns, track completion rates, report results to leadership, and follow up with repeat offenders or high-risk user groups. * Support SOC 2 evidence collection, pull logs, screenshots, and control artifacts on a recurring cadence to support corporate-side controls for audit and compliance readiness. * Maintain security documentation, keep runbooks, incident response procedures, and access control policies current, accurate, and accessible. * Partner with IT and engineering on security architecture reviews, vulnerability management, and secure configuration standards to reduce attack surface. * Support vendor and third-party security assessments, including reviewing security questionnaires and tracking remediation commitments. * Track and report key security metrics, alert volumes, mean time to respond, endpoint coverage, phishing click rates, and open vulnerabilities, on a recurring basis to the Director, IT. * Leverage AI-assisted threat detection and SIEM analytics to improve alert fidelity, reduce noise, and surface high-priority incidents faster. * Evaluate and pilot AI-powered security tools (e.g., AI-assisted SOAR, behavioral anomaly detection) to augment manual investigation workflows and accelerate response. * Performs other duties as assigned. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)