Security Engineer: Identity, EDR & Automation

Flexport, Inc.; San Francisco (CA); Hybrid; USD 165,000 - 202,000; Full time

Job summary

Flexport in San Francisco seeks a security engineer to own identity and device controls, building policy as code and strengthening EDR coverage for the fleet. You will work with Jamf, Kandji, Intune and other tools to guard access and reduce risk.

Based in SF or willing to relocate, you will collaborate with IT and security teams, ship automated runbooks, and influence the security posture of hundreds of engineers moving a global business.

Qualifications

• Typically 2–5 years of corporate, enterprise, or IT security engineering experience.
• Hands-on experience with modern endpoint management and EDR tooling.
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and major identity providers.
• Comfort writing real code or scripts (Python, Go) to automate manual work.

Responsibilities

• Advance identity posture with SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle, and least-privilege access.
• Build the detections and guardrails that catch account takeover, MFA fatigue, and session token theft before incidents.
• Write and ship device policy as code across macOS and Windows with staged rollout and rollback.
• Maintain and improve our EDR stack's detection and response coverage across the fleet.
• Own SaaS configurations for Google Workspace, Slack, and similar tools, and adapt as new AI agents are added.
• Automate parts of security (device provisioning, access reviews, vendor security questionnaires) to scale headcount.
• Write runbooks and docs to empower the rest of the team.

Skills

Endpoint management

EDR tooling

Identity protocols

Scripting

Communication

Tools

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Job description

Flexport in San Francisco seeks a security engineer to own identity and device controls, building policy as code and strengthening EDR coverage for the fleet. You will work with Jamf, Kandji, Intune and other tools to guard access and reduce risk.

Based in SF or willing to relocate, you will collaborate with IT and security teams, ship automated runbooks, and influence the security posture of hundreds of engineers moving a global business.