Security Engineer, Corporate Security

Flexport; United States; Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health insurance

Equity program

Parental leave

Job summary

Flexport is seeking a Senior Security Engineer to own the security of the corporate environment, including endpoints, identity systems, and the SaaS estate. You will write device policy, manage SSPM for apps like Google Workspace and Slack, and lead zero-trust initiatives while working with IT, Engineering, and People teams.

You will build detection rules in the SIEM, drive incident response, and perform regular risk assessments, evaluating vendor security and regulatory requirements across a

Qualifications

• Typically 5–8 years of experience in enterprise security or security engineering.
• Experience with endpoint security tooling and monitoring.
• Experience leading security incident response and risk assessments.

Responsibilities

• Own and mature endpoint security stack (EDR) across macOS and Windows fleets.
• Own security configuration for critical SaaS apps via SSPM tooling.
• Drive identity posture: SSO coverage, phishing-resistant MFA, and least-privilege access.
• Build and tune SIEM rules; lead incident response.
• Run regular vulnerability/risk assessments; manage vendor reviews.
• Develop runbooks, playbooks, and security documentation; mentor engineers.

Skills

Endpoint security

SIEM & detection

Incident response

Cloud security

Infrastructure as code

Zero trust / access control

Scripting (Python/Bash)

GDPR / privacy regulations

Vendor security reviews

Tools

CrowdStrike / EDR

DLP tools (Cyberhaven, Purview, Varonis)

SSPM tooling

SIEM

Job description

Описание: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. Hundreds of engineers and thousands of freight operators around the world rely on Flexport's internal systems every single day to keep billions of dollars of freight moving. Keeping those systems — and the people who use them — secure is not a compliance checkbox. It's the core infrastructure for a company operating across 112 countries. The PSI (Platform, Security & Infrastructure) team is looking for a Senior Security Engineer to own the security of Flexport's corporate environment: endpoints, identity systems, internal networks, and the SaaS estate. This is a security engineering role, not an IT support role, and not a role where you write policies and hope for the best. You'll build, automate, and be on the ground when things get real.

Задачи:

• Endpoint & SaaS security Own and mature our endpoint security stack (EDR) across macOS and Windows fleets, writing device policy as code — configuration profiles, remediation scripts, and enforcement rules — with staged rollout and rollback built in. Own security configuration and monitoring for Flexport's critical SaaS applications (Google Workspace, Slack, and similar) through SSPM tooling, catching risky OAuth grants and configuration drift before they become incidents.
• Access management Drive Flexport's identity posture: SSO coverage, phishing-resistant MFA and passkey rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate. Lead Flexport's zero-trust journey — making sure the right people have the right access, with the right controls, verified continuously.
• Detection & response Build and tune detection rules in our SIEM, turning signal into actionable alerts, not noise. Lead incident response for security events: triage, contain, remediate, and write the retrospective.
• Vulnerability & risk management Run regular assessments of corporate endpoints and prioritize findings by real business risk. Manage vendor and third‑party security reviews, working with procurement and legal to evaluate risk before it lands in our environment.
• Security enablement & leadership Partner with IT, Engineering, and People teams to embed security into the way we work without creating friction that drives people to workarounds. Develop and maintain runbooks, playbooks, and internal documentation that make the whole team more capable, and mentor engineers earlier in their career. Bring a point of view on how agentic AI tools and browser-based AI assistants change what corporate security needs to watch for.

Требования:

• Typically 5–8 years of experience in enterprise security, corporate IT security, or information security engineering — we care more about what you've built than the exact number.
• Strong working knowledge of endpoint security tooling: DLP (Cyberhaven, Purview, Varonis, or similar) and EDR (CrowdStrike, SentinelOne, or similar).
• Practical SIEM experience, writing detection logic, triaging alerts, and reducing false positive noise.
• Experience leading or playing a significant role in security incident response.
• Working knowledge of cloud environments (AWS, GCP, or Azure).
• Experience with network security in a cloud-first environment (ZTNA, SASE, DNS filtering).
• Hands‑on experience with infrastructure-as-code tools (Terraform) for security configuration management.
• Familiarity with SCIM, OIDC, and fine‑grained authorization at scale.
• Experience working in a high‑growth, global technology company.
• Scripting skills in Python, Bash, or similar, for automating detection, response, and operational tasks.
• Exposure to privacy regulations relevant to a European and global context (GDPR, etc.).

Условия:

We come to the office 3 times a week to hang out, whiteboard, and ship together. We have the latest hardware and software, including frontier AI models on day one. We're agile, but not dogmatic. Teams decide how they work best. Why This Role Is Special Broad ownership: you're not a cog in a large security org — you own the corporate security posture end to end, from endpoints to observability to incident response. Real stakes: Flexport operates in 112 countries with a global workforce. Security here matters at a genuine scale. Build, don't just operate: we want to automate and engineer our way to a stronger posture, not just run playbooks. You're part of PSI: the platform, security, and infrastructure teams work hand in hand at Flexport. We value engineering quality and treat security as infrastructure, not just policy. We sponsor visas for the right candidate. An opportunity to contribute to one of the fastest-growing companies, where you'll have the chance to create a global impact while being part of a thriving multinational environment. Daily catered lunches incl. vegetarian options, breakfast, snacks and soft drinks available in our office on a daily basis. Commute expenses: Flexport will cover home-office commuting costs for employees living outside of Amsterdam. 25 working days as vacation days based on full-time employment. Health insurance: Flexport offers a collective health insurance plan including a basic package and any available additional packages. Your monthly premium is fully paid by Flexport. A defined pension contribution scheme. Equity program: every team member becomes a shareholder, aligning our success with yours. As a private company in a multi-trillion dollar industry, you have a direct stake in our collective growth and success. Employee Assistance Program through Aetna Resources for Living: Flexport provides an employer-sponsored program at no cost to you and your household members. Parental leave benefit: Flexport is here to support you and your family during one of the most important times in life — the birth of a child. Our parental leave program allows both mothers and partners to take time off from work for pregnancy, childbirth, and to bond with your new child.