Senior Detection & Response Engineer — End-to-End Security

Flexport; Atlanta (GA); On-site; USD 206,000 - 252,000; Full time

Benefits offered by this job

Relocation support

Medical, dental, and flexible time off

Job summary

Flexport is seeking a Senior Security Engineer focused on Detection & Response to own end-to-end detections, incident triage, and proactive threat hunting. The team operates globally with follow-the-sun pager coverage, and you will influence telemetry, tooling, and incident workflows.

You will build detections across endpoint, identity, SaaS, and cloud, track quality against MITRE ATT&CK, and drive automation to reduce toil. This is a hands-on role in a security-forward org.

Qualifications

• 5-8 years of experience in detection engineering, incident response, or threat hunting.
• Proficiency in Python or Go; able to write production-grade detection and automation code.
• Experience with a modern SIEM (Panther, Elastic, Splunk) and deployed detection logic in production.
• Practical incident response leadership in real security incidents.

Responsibilities

• Build and tune detections across endpoint, identity, SaaS, and cloud; treat them as software and ship via CI/CD.
• Track detection quality: coverage against MITRE ATT&CK, precision, time-to-detect.
• Own incident response: triage, contain, remediate, and write post-incident retrospectives.
• Build automation to reduce toil and ensure cross-time-zone context.

Skills

Detection engineering

Incident response

Threat hunting

Python

Go

Tools

Panther

Elastic

Splunk

Job description

Flexport is seeking a Senior Security Engineer focused on Detection & Response to own end-to-end detections, incident triage, and proactive threat hunting. The team operates globally with follow-the-sun pager coverage, and you will influence telemetry, tooling, and incident workflows.

You will build detections across endpoint, identity, SaaS, and cloud, track quality against MITRE ATT&CK, and drive automation to reduce toil. This is a hands-on role in a security-forward org.