Risk Operations Analyst - SSO

Crexi

ABOUT CREXI Crexi is reimagining commercial real estate with an AI-powered platform built to deliver smarter, more efficient solutions at every stage of the deal lifecycle. From real-time data and market insights generated by Crexi Intelligence, to targeted property marketing and seamless deal management through Crexi PRO, and a transparent, time-bound bidding experience with Crexi Auction— Crexi enables users to evaluate opportunities, maximize exposure, and close with speed and confidence. To date, Crexi has facilitated over $1 trillion in transactions, 8.6 billion square feet leased, and supports a growing community of more than 2 million monthly active users.  Crexi’s mission is to catalyze the next generation of commercial real estate through three core pillars: Access, Innovation, and Connection. Crexi’s platform democratizes CRE by providing unprecedented access to market insights and opportunities, accelerates CRE dealmaking with purpose-built technology that enhances speed and transparency; and empowers CRE professionals with a centralized platform designed for real-time collaboration and success. About This Role: The Senior Security Operations Analyst is Crexi’s primary internal security practitioner, responsible for day-to-day security operations, threat detection and response, and maintaining a strong security posture across the organization. Reporting to the Director, Information Technology, this role serves as the internal first line of defense for security events, protecting company systems, endpoints, identities, and data against evolving threats.   What You’ll Do  * Monitor and triage security alerts, serve as the first internal escalation point for managed SOC vendors, investigate flagged incidents, and maintain accurate, timely incident logs. * Manage endpoint security tooling, administer EDR and MDM platforms, enforce policy compliance across employee devices, and remediate vulnerabilities identified through scans or alerts * Owns identity and access management (IAM) policy, access review design and audit reporting. * Run the phishing simulation and security awareness program, schedule and manage campaigns, track completion rates, report results to leadership, and follow up with repeat offenders or high-risk user groups. * Support SOC 2 evidence collection, pull logs, screenshots, and control artifacts on a recurring cadence to support corporate-side controls for audit and compliance readiness. * Maintain security documentation, keep runbooks, incident response procedures, and access control policies current, accurate, and accessible. * Partner with IT and engineering on security architecture reviews, vulnerability management, and secure configuration standards to reduce attack surface. * Support vendor and third-party security assessments, including reviewing security questionnaires and tracking remediation commitments. * Track and report key security metrics, alert volumes, mean time to respond, endpoint coverage, phishing click rates, and open vulnerabilities, on a recurring basis to the Director, IT. * Leverage AI-assisted threat detection and SIEM analytics to improve alert fidelity, reduce noise, and surface high-priority incidents faster. * Evaluate and pilot AI-powered security tools (e.g., AI-assisted SOAR, behavioral anomaly detection) to augment manual investigation workflows and accelerate response. * Performs other duties as assigned.   Who You Are  * Strong working knowledge of security operations concepts: threat detection, incident response, vulnerability management, and identity and access control. * Hands-on experience with EDR platforms (e.g., CrowdStrike), MDM tools, and SIEM or log management platforms. * Working knowledge of IAM principles and tools (e.g., Azure AD / Entra ID), including SSO, SCIM, and privileged access management. * Familiarity with SOC 2 trust service criteria and the practical evidence collection requirements for a corporate IT environment. * Strong written communication skills, able to produce clear incident reports, runbooks, and executive-facing security summaries. * Detail-oriented and organized, with the ability to manage multiple open incidents, tasks, and recurring compliance obligations simultaneously. * Collaborative approach to working with cross-functional stakeholders including IT, engineering, legal, and HR. * Self-starter who operates with a high degree of ownership and escalates appropriately when uncertainty or risk warrants it. * Familiarity with AI/ML-assisted security tooling and an understanding of how AI both augments defensive capabilities and introduces new risk vectors to the environment. Qualifications:  * Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field preferred; equivalent professional experience considered. * 5–8 years of experience in a security operations, IT security, or similar hands-on role. * Hands-on experience supporting compliance frameworks, particularly SOC 2; familiarity with control evidence collection and audit preparation. * Security certifications preferred, e.g., CompTIA Security+, GCIA, GCIH, SSCP, or equivalent. * Experience working in cloud environments (AWS, Azure) with an understanding of cloud security fundamentals. * Experience with AI-powered security tools, SOAR platforms, or automated threat detection workflows is a plus. Why Crexi?  * Rapidly growing startup with a dynamic work environment * Flexible team structure with the ability to progress in career * Health, Dental, and Vision insurance * Collaborative culture and numerous team activities   The California base pay range for this position is $148,000-$201,000 per year with eligibility for generous bonus, equity, and healthcare insurance.  The total compensation package offered to a successful candidate will depend on several factors, which may include, but are not limited to, the type and length of experience applicable to the role and within the industry, job-related skills, job level, and geographic location. Commercial Real Estate Exchange, Inc (“Crexi”) is a multi-state employer, and this salary range may not reflect positions that work in other states. Crexi is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Crexi will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Cloudflare

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.  At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. AVAILABLE LOCATIONS * Atlanta, US * Austin, US * Denver, US * Seattle, US * Washington DC, US ABOUT THE ROLE Atlanta (US), Austin (US), Denver (US), Seattle (US), Toronto (Canada) We are seeking a DCIM Program Leader to build, scale, and own our Data Center Infrastructure Management program.  This leadership role is part of the Infrastructure Operations organization, which is responsible for building, scaling, and running one of the world's largest and most important cloud networks. Cloudflare’s global network spans more than 330 cities, and is a key strategic asset that supports all of our customers and products. As a leader on this team, you will play a crucial role in ensuring the performance, availability, and security of our infrastructure. The DCIM Program Leader role is the single point of ownership for the Nlyte platform across Cloudflare's global network of 330+ cities. You will architect our Workflow and Change Management policy, own the strategic vision, and help drive the deep integration necessary to establish Nlyte as the mandatory Single Source of Truth (SSOT), enabling the disciplined, high-velocity scale of our edge and core network. We operate in a fast-paced environment where you will be expected to drive both project delivery and operational excellence through continuous improvement, standardization, and optimization. This isn't just about day to day operations; it's about building a scalable, performant, secure, and resilient infrastructure that plays a critical role in us building a better Internet. RESPONSIBILITIES * Own the successful deployment of CAPEX investments, ensuring our infrastructure scales ahead of demand. * Collaborate strategically with cross-functional partners including Project Managers, Capacity Planning, Finance, and Security to deliver on ambitious group initiatives. * Manage key third-party vendors and contractors, holding them accountable for performance and service level agreements (SLAs). * Drive a culture of continuous improvement by championing standardization, optimization, and automation. * Own incident response, root cause analysis (RCA), and executive-level communication during critical events. * Foster a best-in-class operations team by bringing fresh perspectives, leadership acumen, and a focus on employee engagement. * Change Policy Architect: Design and enforce the global DCIM Workflow and Change Management policies (MAC process), ensuring strict ITIL/ITSM compliance across IT, Facilities, and Deployment teams worldwide. * Technical Integration Leader: Support the complex, bi-directional API/database integration between Nlyte and core enterprise systems (ERP, CMDB, etc) to automate asset management and trigger workflow requests. * Capacity Strategy: Partner with the DCIM Analyst and our Capacity Planning team to develop forward-looking capacity models, ensuring resource availability and optimization for new services like Workers AI and R2. * Governance & Leadership: Establish and track key operational metrics (e.g., Workflow Compliance KPIs, Data Accuracy Rate), providing executive reporting on infrastructure risk. * Lead and mentor the DCI Administrator and Analyst and members across the Infrastructure Engineering organization. DESIRABLE SKILLS, KNOWLEDGE, AND EXPERIENCE * You are an experienced engineering leader and DCIM expert, with a passion for building high-performing teams and a track record of driving operational excellence. You will set strategy, establish priorities, and mentor a group of top technical talent. This role is for a hands-on leader who can rapidly learn, adapt, and apply learnings to enable fast and sustainable growth. You thrive in a hyper-growth environment and have an outstanding ability to get things done under pressure while leading with optimism and grit. * You have a proven track record of scaling teams, driving change, and being a well-respected technical leader and people manager. You are not just a manager, but a mentor who can grow and empower your team to ensure an energized, motivating, and inclusive work environment. * You are Principled; you are the guardian of data integrity, refusing to allow undocumented changes. You are Curious; you seek novel ways to automate workflow integration with proprietary Cloudflare systems to achieve zero-touch provisioning. * Education: * Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field, or equivalent practical experience. * Experience: * 7+ years in Infrastructure/Data Center Operations, including inventory control and asset lifecycle. * 4+ years managing a major DCIM platform (Nlyte preferred). * Proven ability to lead complex, cross-functional programs and manage vendor relationships in a high-velocity environment. * Experience with leading change management in ERP and asset management transformation efforts. * Technical Skills: * Expert with ERP asset management and maintenance management functionalities. * Expert-level knowledge of ITIL v4, particularly Change and Configuration Management, with demonstrable experience enforcing standards at a global scale. * Strong understanding of Data Center infrastructure, including data center hardware (servers, storage, networking equipment) and their configurations. * Ability to analyze complex data and generate detailed reports. * Soft Skills: * Exceptional attention to detail and strong organizational skills. * Excellent problem-solving and root cause analysis capabilities. * Strong communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and present recommendations to various stakeholders. * Customer service-oriented with a proactive and collaborative team approach. What Makes Cloudflare Special? We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet. Project Galileo: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost. Athenian Project: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states. 1.1.1.1: We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers. Sound like something you’d like to be a part of? We’d love to hear from you! Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.  More details about this will be available at that stage of the interview process. This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license. Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer. Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Airbnb

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way. The Difference You Will Make: Airbnb is entering a new era—reimagining how fraud, safety, and quality are measured, protected, and elevated across the digital landscape. Reporting to the Director of Advanced Analytics, Fraud & Safety, you will lead a dispersed team of ~8 advanced analysts tasked with turning safety measurement into governed, self-serve decision systems for Policy, Ops, Legal, Product, and Engineering. You will be a pivotal leader safeguarding Airbnb’s global community. You’ll steer a multidisciplinary team that designs, delivers, and scales state-of-the-art analytics for: * Safety (physical & digital) * Connected-account & circumvention detection * Privacy protection & risk management This role isn’t just about reporting what happened; it’s about building the systems that help Airbnb see around corners. You will democratize data access, build always-on scenario simulators for fraud and safety, and turn incident impacts into seamless signals for continuous improvement. Your insights and systems will empower every stakeholder—from legal to operations, policy to product—to make bold, data-driven, and context-aware decisions in real time. A Typical Day: * Own end-to-end analytical workflows for platform safety controls: data ingestion, feature engineering, modeling, experimentation, and visualization. * A core mandate is to co-own and drive the enterprise-wide “Safety Single Source of Truth” (SSoT) strategy —a unified, structured data asset and taxonomy that underpins decision-making across  Product, Operations, Policy, and Legal. Ensure metrics are future-proof, privacy-compliant, and globally scalable. * Build self-service, data tools that empower non-technical teams to ask deep questions, run “what if” analyses, and generate actionable, data-backed outcomes without gatekeeping.  * Craft compelling narratives and dashboards that surface insights to executives and cross-functional teams. * Cross-Functional Execution * Lead incident “war rooms,” presenting fast, actionable insights during high-severity events. * Contribute to policy design (e.g., connected-accounts enforcement thresholds). * Support external audits, law-enforcement requests, and board-level reporting * Partner with Policy, Product, Engineering, Fraud and Safety  Ops, and Legal to align analytics with global safety and privacy regulations (e.g., GDPR, CCPA). * Operationalize frameworks that instantly assess and size the platform, reputational, and regulatory impact of safety incidents, enabling rapid escalation, crystal-clear retrospectives, and lessons learned. Your Expertise: * 8+ years of experience in analytics, risk, or safety; 3+ years leading high-performing teams. * Proven ownership of large-scale data products or taxonomies in a regulated environment. * Strong SQL & data-modeling expertise; experimentation design, familiarity with Python/R; working knowledge of ML pipelines. * Deep understanding of: * How to measure rare platform events with statistical rigor * User authentication & connected-account vectors (e.g., social logins, device fingerprinting). * Circumvention tactics (e.g., multi-accounting, listing duplication, payment abuse). * Global privacy and data-protection standards (GDPR, CCPA, SOC 2, etc.). * Skilled in incident impact scoping, post-incident analytics, and scenario planning or tabletop exercises—translating insights into systematic improvements. * Track record of enabling legal, policy, ops, product, and engineering teams to make independent, forward-facing, data-driven decisions via self-service  * Exceptional storyteller with a flair for making complex analytics actionable for every audience, and for championing transformation deep into the organization  Good to Have: * Prior work in marketplace, fintech, or travel/hospitality tech environments. * Familiarity with real-time decision engines, graph analytics, and anomaly-detection frameworks. * Experience leading hybrid teams (onsite/remote) and managing third-party analytics vendors  * Statistics or quantitative graduate degree (MS/PhD) Your Location: This position is US - Remote Eligible. The role may include occasional work at an Airbnb office or attendance at offsites, as agreed to with your manager. While the position is Remote Eligible, you must live in a state where Airbnb, Inc. has a registered entity. Click here for the up-to-date list of excluded states. This list is continuously evolving, so please check back with us if the state you live in is on the exclusion list  If your position is employed by another Airbnb entity, your recruiter will inform you what states you are eligible to work from. Our Commitment To Inclusion & Belonging: Airbnb is committed to working with the broadest talent pool possible. We believe diverse ideas foster innovation and engagement, and allow us to attract creatively-led people, and to develop the best products, services and solutions. All qualified individuals are encouraged to apply. We strive to also provide a disability inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation in order to submit an application, please contact us at: reasonableaccommodations@airbnb.com. Please include your full name, the role you’re applying for and the accommodation necessary to assist you with the recruiting process.  We ask that you only reach out to us if you are a candidate whose disability prevents you from being able to complete our online application. How We'll Take Care of You: Our job titles may span more than one career level. The actual base pay is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role may also be eligible for bonus, equity, benefits, and Employee Travel Credits.   Pay Range $212,000—$265,000 USD