Senior Detection & Response Architect

Flexport; New York (NY); On-site; USD 183,000 - 229,000; Full time

Job summary

Flexport, a leading freight technology company, seeks Detection & Response engineers to own detections end to end: write, tune, and respond to alerts with a follow-the-sun pager rotation. You will define telemetry, build production-grade detections, and work across endpoint, identity, SaaS, and cloud.

You’ll triage incidents, remediate, and write post-incident retrospectives, while building automation to remove toil.

Qualifications

• Typically 5–8 years of experience in detection engineering, incident response, or threat hunting.
• Proficiency in at least one programming language (Python, Go, or similar).
• Experience with a modern SIEM (Panther, Elastic, Splunk, or similar).
• Practical incident response experience: led or played a major role in triaging and closing real incidents.

Responsibilities

• Build and tune detections across endpoint, identity, SaaS, and cloud.
• Track detection quality: MITRE ATT&CK coverage, precision, time-to-detect.
• Own incident response: triage, contain, remediate, write retrospective.
• Build automation to remove toil from investigations and coordinate with global teams.
• Define telemetry requirements for new systems before they ship and perform proactive threat hunting.

Skills

Python

Go

SIEM

Incident response

Threat hunting

Tools

Panther

Elastic

Splunk

Job description

Flexport, a leading freight technology company, seeks Detection & Response engineers to own detections end to end: write, tune, and respond to alerts with a follow-the-sun pager rotation. You will define telemetry, build production-grade detections, and work across endpoint, identity, SaaS, and cloud.

You’ll triage incidents, remediate, and write post-incident retrospectives, while building automation to remove toil.