Security Engineer - Build Core Security Program + Equity

Flox; København; Hybrid; DKK 650,000 - 900,000; Full time

Benefits offered by this job

Competitive salary

Equity

Hybrid work

Job summary

Flox is hiring its first dedicated security engineer to work with engineering leadership on pragmatic, developer-friendly security practices. You’ll deploy tools, harden infrastructure, and close gaps while shaping the security roadmap for a company at a pivotal stage.

You’ll own incident response, Cloud security (AWS + Cloudflare), endpoint protection, and software supply chain security, partnering with developers to embed security into daily workflows.

Qualifications

• 3–5 years of hands-on security engineering in software/cloud-native environments.
• Proven track record deploying tools and controls, not just advising.
• Strong knowledge of AWS security services (IAM, GuardDuty, Security Hub).
• Experience with Cloudflare in security, and with CI/CD security tooling.

Responsibilities

• Deploy and configure internal security controls and tooling; harden infrastructure.
• Build and maintain incident response runbooks and test recovery scenarios.
• Own security roadmap, prioritization, and incident management processes.
• Integrate SAST/SCA into developer workflows and CI/CD pipelines.
• Manage IAM, access governance, and least-privilege policies across cloud and SaaS.
• Assess software supply chain security and manage vulnerability remediation.

Skills

AWS security

Cloudflare

Endpoint security

SBOM/SLSA

CI/CD security tooling

Scripting (Python/Bash)

Tools

SIEM

Checkov/tfsec

Job description

Flox is hiring its first dedicated security engineer to work with engineering leadership on pragmatic, developer-friendly security practices. You’ll deploy tools, harden infrastructure, and close gaps while shaping the security roadmap for a company at a pivotal stage.

You’ll own incident response, Cloud security (AWS + Cloudflare), endpoint protection, and software supply chain security, partnering with developers to embed security into daily workflows.