Product Security Engineer II - Build Secure-by-Default Tools

Flexport; Netherlands; On-site; EUR 70,000 - 90,000; Full time

Benefits offered by this job

Catered lunches

Health insurance

Pension contribution

Equity program

Parental leave benefit

Employee Assistance Program

Job summary

Flexport is looking for a Product Security Engineer II in the Netherlands. This role involves identifying security risks, building security tools, and collaborating closely with product teams to ensure secure software development. You will work on enhancing product security by developing innovative solutions and addressing emerging threats.

Join Flexport and contribute to making global trade secure while enjoying benefits such as health insurance, equity programs, and opportunities for professional growth.

Qualifications

• 2-5 years of experience in product/application security or software development with a security focus.
• Strong grasp of web application security principles and common attack vectors (e.g., OWASP Top 10).
• Proficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools.
• Working knowledge of at least one modern programming language (e.g., Ruby, Java/Kotlin, TypeScript/JavaScript, Python).
• Working knowledge of at least one major cloud provider (AWS, GCP, Azure).
• Hands-on experience with SAST tools (Cycode, Semgrep, Snyk, or similar).
• Experience improving developer experience (DevEx) security without slowing teams down.
• Clear, constructive communicator on technical risk – in writing, in code review, and in conversation.
• Collaborative by default: you partner with developers, SREs, and security peers rather than handing down mandates.
• Comfortable with security on-call rotation and picking up work across security disciplines when needed.

Responsibilities

• Build guardrails and AI-accelerated patterns that make secure-by-default the path of least resistance.
• Build and maintain security tooling and automation that scales product security.
• Respond to emerging threats.
• Contribute to threat modeling, design reviews, and code reviews.
• Partner with engineering to security-review and test new features and services.
• Triage, reproduce, and validate incoming bug bounty submissions and internal security reports.
• Cut through SAST and vulnerability scanner noise to prioritize real issues.
• Write clear, actionable security patterns for developers.
• Stay current on web and cloud security trends.

Skills

Product/application security experience

Web application security principles

Application testing tools proficiency

Modern programming language knowledge

Cloud provider knowledge

SAST tools experience

Developer experience security improvement

Clear communication on technical risk

Collaborative mindset

Tools

Burp Suite

OWASP ZAP

Browser developer tools

Job description

Flexport is looking for a Product Security Engineer II in the Netherlands. This role involves identifying security risks, building security tools, and collaborating closely with product teams to ensure secure software development. You will work on enhancing product security by developing innovative solutions and addressing emerging threats.

Join Flexport and contribute to making global trade secure while enjoying benefits such as health insurance, equity programs, and opportunities for professional growth.