Security Engineer: Automate Security & Identity Defense

Flexport; Denver (CO); On-site; USD 131,000 - 202,000; Full time

Job summary

Flexport is seeking a security engineer to write code and ship automation, focusing on identity governance, endpoint security, and SaaS posture across the company’s systems. You’ll build guardrails, automate provisioning, and empower teams with scalable security controls.

The role emphasizes hands-on engineering, modern tooling, and collaboration across security, IT, and product teams, with regular in-office presence in San Francisco and a fast-paced, outcome-driven culture.

Qualifications

• Hands-on experience with modern endpoint management and EDR tooling.
• Working knowledge of identity protocols (SAML, OIDC, SCIM).
• Ability to write real code or scripts (Python or Go).
• Ability to explain controls to engineers, sales, and execs clearly.

Responsibilities

• Advance identity posture: SSO coverage, MFA rollout, SCIM automation, least-privilege access.
• Build detections and guardrails to catch account takeover and token theft.
• Write and ship device policy as code for macOS and Windows with rollout/rollback.
• Maintain and improve our EDR detection and response coverage across the fleet.
• Reduce SaaS risk using SSPM tooling and automation across critical apps.

Skills

EDR tooling

Identity protocols

Scripting (Python/Go)

Clear communicator

Tools

CrowdStrike

SentinelOne

Jamf

Kandji

Intune

Job description

Flexport is seeking a security engineer to write code and ship automation, focusing on identity governance, endpoint security, and SaaS posture across the company’s systems. You’ll build guardrails, automate provisioning, and empower teams with scalable security controls.

The role emphasizes hands-on engineering, modern tooling, and collaboration across security, IT, and product teams, with regular in-office presence in San Francisco and a fast-paced, outcome-driven culture.