Security Engineer: Code-Driven Security & Automation

Flexport; Palo Alto (CA); Sur place; USD 165 000 - 202 000; Plein temps

Résumé du poste

Flexport is seeking a security engineer based in San Francisco to design, implement, and automate security controls across identities, devices, and SaaS tools. You will own automation that reduces manual work and improve the security posture for the PSI team, collaborating with engineering and IT stakeholders.

The role emphasizes hands-on coding, policy as code, and practical risk reduction, with relocation support and a strong on-site presence in our SF office.

Qualifications

• Typically 2-5 years of experience in corporate, enterprise, or IT security engineering.
• Hands-on experience with modern endpoint management and EDR tooling (Jamf, Kandji, Intune, CrowdStrike, SentinelOne, or similar).
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider (Okta, Entra, Google Workspace, or similar).
• Comfort writing real code or scripts (Python, Go, or similar) to replace manual, ticket-driven work with automation.
• Clear, practical communicator who can explain a control tradeoff to an engineer, a salesperson, and a VP without changing the facts.

Responsabilités

• Identity & access: Advance our identity posture: SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate.
• Build the detections and guardrails that catch account takeover, MFA fatigue attacks, and session token theft before incidents.
• Endpoint & device lifecycle: Write and ship device policy as code across macOS and Windows, with staged rollout and rollback built in.
• Maintain and improve our EDR stack's detection and response coverage across the fleet.
• SaaS posture: Reduce SaaS risk at scale through SSPM tooling and automation; own security config for SaaS tools used daily.
• Automation & enablement: Automate parts of corporate security that don't need a human; write runbooks and documentation to empower the team.

Connaissances

Identity & access management

Endpoint security

Scripting

Security communication

Security engineering

Outils

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Description du poste

Flexport is seeking a security engineer based in San Francisco to design, implement, and automate security controls across identities, devices, and SaaS tools. You will own automation that reduces manual work and improve the security posture for the PSI team, collaborating with engineering and IT stakeholders.

The role emphasizes hands-on coding, policy as code, and practical risk reduction, with relocation support and a strong on-site presence in our SF office.