Security Engineer: Identity, EDR & SaaS Defense

Flexport; Northern (KY); Hybrid; USD 147,000 - 183,000; Full time

Job summary

Flexport is seeking a security engineer to advance identity and access controls, strengthen detection coverage, and scale SaaS posture across the fleet. You will own automation efforts, write code to replace manual work, and partner with IT and People teams to ship robust controls.

The role emphasizes hands-on endpoint management, modern EDR tooling, and scripting ability. You’ll operate from a San Francisco–centric security team with cross-continental collaboration and a focus on practical,

Qualifications

• 2–5 years of experience in corporate, enterprise, or IT security engineering.
• Hands-on experience with modern endpoint management and EDR tooling.
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider.
• Comfort writing real code or scripts (Python, Go) to automate tasks.
• Clear, practical communicator who can explain controls to engineers and executives.

Responsibilities

• Identity & access: expand SSO coverage, MFA rollout, SCIM automation, least-privilege access.
• Write and ship device policy as code across macOS and Windows with rollout and rollback.
• Maintain and improve our EDR stack's detection and response coverage.
• SaaS posture: reduce risk via SSPM tooling, detect risky OAuth grants and shadow IT.
• Automation: automate repetitive security tasks and write runbooks and docs.

Skills

Endpoint security

Identity protocols

Scripting (Python, Go)

Clear communicator

Tools

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Job description

Flexport is seeking a security engineer to advance identity and access controls, strengthen detection coverage, and scale SaaS posture across the fleet. You will own automation efforts, write code to replace manual work, and partner with IT and People teams to ship robust controls.

The role emphasizes hands-on endpoint management, modern EDR tooling, and scripting ability. You’ll operate from a San Francisco–centric security team with cross-continental collaboration and a focus on practical,