> Markdown version of [/jobs/ext/2043591-security-engineer](https://www.wearedevelopers.com/jobs/ext/2043591-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** Commercial Real Estate Exchange, Inc. - **Location:** Los Angeles, CA, United States - **Experience:** Expert - **Salary:** $167,000.0 - $227,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Software as a Service, Cloud Computing Security, Cyber Security, Identity and Access Management, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Information Technology, Marketplace, Static Application Security Testing, Dynamic Application Security Testing - **Published:** August 13, 2026 - **Apply:** https://www.builtincolorado.com/auth/login?destination=/job/senior-security-engineer/10651100 ## About the Role * Required: Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience. * Required: 5+ years of security engineering experience. * Preferred: Experience with SaaS or marketplace platforms. Who You Are: * Thrives in a fast-paced, dynamic environment. * Exceptional communication skills, with the ability to provide clear and concise information to stakeholders at all levels. * Strong analytical skills, with the ability to interpret complex information and identify patterns. * Excellent organizational and prioritization skills, with the ability to manage multiple priorities and deadlines. * Self-starter who independently owns their own success and demonstrates strong initiative. * Responsive, action-oriented, and proactive in identifying and resolving issues. * Strong problem-solving and creative thinking skills, with the ability to evaluate options and implement effective solutions. * Effective collaborator, with the ability to work cross-functionally and build strong working relationships. * Demonstrated ability to handle sensitive and confidential information with the utmost professionalism and discretion. * Command of security tooling and domains such as SIEM, SAST/DAST, cloud security (AWS), IAM, vulnerability management, and compliance frameworks (e.g., SOC 2, ISO 27001). * Strong security engineering background with experience delivering in a SaaS environment. * Working knowledge of agile delivery practices. ## Description The Senior Security Engineer designs, implements, and maintains security controls across Crexi's systems. This role serves as a subject matter expert on security tooling and practices, leads remediation of complex vulnerabilities, and shares expertise with less experienced engineers. The Senior Security Engineer partners with engineering and IT to embed security into the full software lifecycle. What You'll Do: * Independently designs and implements security controls and tooling across cloud (AWS) and on-prem environments. * Leads execution of the vulnerability management program, prioritizing and driving remediation across teams. * Serves as subject matter expert on SIEM, SAST/DAST tooling, and IAM practices. * Partners with engineering teams to embed security requirements into the software development lifecycle. * Leads investigation and response for security incidents, including root cause analysis. * Mentors less experienced engineers on security tooling and best practices. * Supports audit readiness, gathering and organizing evidence for SOC 2 and ISO 27001. * Identifies gaps in existing controls and recommends improvements. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Launching a marketplace on-time: A lesson in taking shortcuts using spreadsheets!](https://www.wearedevelopers.com/videos/477-launching-a-marketplace-on-time-a-lesson-in-taking-shortcuts-using-spreadsheets) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Containers in the cloud - State of the Art in 2022](https://www.wearedevelopers.com/videos/410-containers-in-the-cloud-state-of-the-art-in-2022) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [How to Monetize Your APIs](https://www.wearedevelopers.com/videos/749-how-to-monetize-your-apis) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [What is Software Engineering?](https://www.wearedevelopers.com/magazine/289-what-is-software-engineering) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Software Engineer Career: Things You Should Know](https://www.wearedevelopers.com/magazine/143-software-engineer-career-things-you-should-know)